Send sensor events
POST/api/ingest/events
Send a batch of events collected on a host. At most 500 events and 256 KB per request, and 1,200 events per minute per token.
Each event needs payload.schema_version set to "1.0" (agent.config events also accept "1.1"). Events whose collected_at is outside the accepted time window are rejected individually.
Request
Responses
- 202
- 401
- 413
- 422
- 429
- 503
Accepted. Check rejected for events that were refused individually.
The token is missing, malformed, unknown or revoked. Repeated failures for one token prefix are rate limited (30 a minute).
The body is larger than the endpoint limit. The size is checked before authentication and again while streaming.
The body is not valid JSON, is empty, has too many events or uses an unsupported schema_version.
The per-token rate limit was exceeded. Wait Retry-After seconds.
Response Headers
Seconds to wait before retrying.
The rate limiter or storage is temporarily unavailable. Retry after Retry-After seconds. The call is safe to repeat.
Response Headers
Seconds to wait before retrying.