Creates a saved search.

Usage notes

  • Host consists of a project name and a Log Service endpoint. You must specify a project in Host.
  • An AccessKey pair is created and obtained. For more information, see AccessKey pair.

    The AccessKey pair of an Alibaba Cloud account has permissions on all API operations. Using these credentials to perform operations in Log Service is a high-risk operation. We recommend that you use a RAM user to call API operations or perform routine O&M. To create a RAM user, log on to the RAM console. Make sure that the RAM user is granted the permissions to manage Log Service resources. For more information, see Create a RAM user and authorize the RAM user to access Log Service.

  • The information that is required to query logs is obtained. The information includes the name of the project to which the logs belong, the region of the project, and the name of the Logstore to which the logs belong. For more information, see Manage a project and Manage a Logstore.
  • Limits are imposed when you use Log Service to query logs. We recommend that you specify query statements and query time ranges based on the limits. For more information, see Log search overview and Log analysis overview.


OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer. OpenAPI Explorer dynamically generates the sample code of the operation for different SDKs.

Request headers

This operation does not have operation-specific request headers and uses only common request headers. For more information, see Common request parameters.

Request syntax

POST /savedsearches HTTP/1.1

Request parameters

Parameter Type Position Required Example Description
Object Body Yes

The details of the saved search.

savedsearchName String Body Yes pv in minutes

The name of the saved search. The name must be 3 to 63 characters in length.

searchQuery String Body Yes *|select date_format(__time__-__time__%60, '%H:%i:%s') as time, COUNT(*) as pv group by time

The query statement of the saved search. A query statement consists of a search statement and an analytic statement in the Search statement|Analytic statement format.

The search statement or the query statement. For more information, see Log search overview and Log analysis overview.

logstore String Body Yes aliyun-test-logstore

The name of the Logstore to which the saved search belongs.

topic String Body No theme

The topic of the logs.

displayName String Body Yes displayname

The display name.

Response parameters

Parameter Type Example Description
Server String nginx

The name of the server.

Content-Type String application/json

The format of the response body.

Content-Length String 0

The length of the response body.

Connection String close

Indicates whether the connection is persistent. Valid values:

  • close: The connection is non-persistent. A new TCP connection is established for each HTTP request.
  • keep-alive: The connection is persistent. After a TCP connection is established, the connection remains open, and no more time or bandwidth is consumed to establish new connections.
Date String Sun, 27 May 2018 08:25:04 GMT

The time when the response was returned.

x-log-requestid String 5B0A6B60BB6EE39764D458B5

The request ID.


Sample requests

POST /savedsearches HTTP/1.1

  "savedsearchName" : "pv in minutes",
  "searchQuery" : "*|select date_format(__time__-__time__%60, '%H:%i:%s') as time, COUNT(*) as pv group by time",
  "logstore" : "aliyun-test-logstore",
  "topic" : "theme",
  "displayName" : "displayname"

Sample success responses

JSON format

HTTP/1.1 200 OK

Error codes

For a list of error codes, see Service error codes.