v1

latestOpenAPI 3.0.02026-07-142351,1971.3 MB

Usage Metering

Get hourly usage attribution

Get hourly usage attribution. Multi-region data is available starting March 1, 2023.

This API endpoint is paginated. To make sure you receive all records, check if the value of next_record_id is set in the response. If it is, make another request and pass next_record_id as a parameter. Pseudo code example:

response := GetHourlyUsageAttribution(start_month)
cursor := response.metadata.pagination.next_record_id
WHILE cursor != null BEGIN
  sleep(5 seconds)  # Avoid running into rate limit
  response := GetHourlyUsageAttribution(start_month, next_record_id=cursor)
  cursor := response.metadata.pagination.next_record_id
END

get/api/v1/usage/hourly-attribution

Query parameters

start_hrstring date-time required

Datetime in ISO-8601 format, UTC, precise to hour: [YYYY-MM-DDThh] for usage beginning at this hour.

end_hrstring date-time

Datetime in ISO-8601 format, UTC, precise to hour: [YYYY-MM-DDThh] for usage ending before this hour.

usage_type'api_usage' | 'apm_fargate_usage' | 'apm_host_usage' | 'apm_usm_usage' | 'appsec_fargate_usage' | 'appsec_usage' | 'asm_serverless_traced_invocations_usage' | 'asm_serverless_traced_invocations_percentage' | 'bits_ai_investigations_usage' | 'browser_usage' | 'ci_code_coverage_committers_percentage' | 'ci_code_coverage_committers_usage' | 'ci_pipeline_indexed_spans_usage' | 'ci_test_indexed_spans_usage' | 'ci_visibility_itr_usage' | 'cloud_siem_usage' | 'code_security_host_usage' | 'container_excl_agent_usage' | 'container_usage' | 'cspm_containers_usage' | 'cspm_hosts_usage' | 'custom_event_usage' | 'custom_ingested_timeseries_usage' | 'custom_timeseries_usage' | 'cws_containers_usage' | 'cws_fargate_task_usage' | 'cws_hosts_usage' | 'data_jobs_monitoring_usage' | 'data_stream_monitoring_usage' | 'dbm_hosts_usage' | 'dbm_queries_usage' | 'error_tracking_usage' | 'error_tracking_percentage' | 'estimated_indexed_spans_usage' | 'estimated_ingested_spans_usage' | 'fargate_usage' | 'flex_logs_starter' | 'flex_stored_logs' | 'functions_usage' | 'incident_management_monthly_active_users_usage' | 'indexed_spans_usage' | 'infra_host_usage' | 'infra_host_basic_usage' | 'ingested_logs_bytes_usage' | 'ingested_spans_bytes_usage' | 'invocations_usage' | 'lambda_traced_invocations_usage' | 'llm_observability_usage' | 'llm_spans_usage' | 'logs_indexed_15day_usage' | 'logs_indexed_180day_usage' | 'logs_indexed_1day_usage' | 'logs_indexed_30day_usage' | 'logs_indexed_360day_usage' | 'logs_indexed_3day_usage' | 'logs_indexed_45day_usage' | 'logs_indexed_60day_usage' | 'logs_indexed_7day_usage' | 'logs_indexed_90day_usage' | 'logs_indexed_custom_retention_usage' | 'mobile_app_testing_usage' | 'ndm_netflow_usage' | 'npm_host_usage' | 'network_device_wireless_usage' | 'obs_pipeline_bytes_usage' | 'obs_pipelines_vcpu_usage' | 'online_archive_usage' | 'product_analytics_session_usage' | 'profiled_container_usage' | 'profiled_fargate_usage' | 'profiled_host_usage' | 'published_app' | 'rum_browser_mobile_sessions_usage' | 'rum_ingested_usage' | 'rum_investigate_usage' | 'rum_replay_sessions_usage' | 'rum_session_replay_add_on_usage' | 'sca_fargate_usage' | 'sds_scanned_bytes_usage' | 'serverless_apps_usage' | 'serverless_apps_apm_usage' | 'siem_12mo_retention_usage' | 'siem_6mo_retention_usage' | 'siem_analyzed_logs_add_on_usage' | 'siem_ingested_bytes_usage' | 'snmp_usage' | 'universal_service_monitoring_usage' | 'vuln_management_hosts_usage' | 'workflow_executions_usage' required

Supported products for hourly usage attribution requests. Usage types are in the format <usage_type>_usage. To obtain the complete list of valid usage types, make a request to the Get usage attribution types API.

Usage type to retrieve. Usage types are in the format <usage_type>_usage. Example: infra_host_usage To obtain the complete list of active usage types that can be used to replace <usage_type> in the field names, make a request to the Get usage attribution types API.

next_record_idstring

List following results with a next_record_id provided in the previous query.

tag_breakdown_keysstring

Comma separated list of tags used to group usage. If no value is provided the usage will not be broken down by tags.

To see which tags are available, look for the value of tag_config_source in the API response.

include_descendantsboolean

Include child org usage in the response. Defaults to true.

Response

OK