---
title: "List all Functions"
method: GET
path: "/functions"
tags: ["functions"]
---
# List all Functions
`GET /functions`
Get a list of all Functions.
## Query parameters
- `showHidden` boolean
- `offset` integer
- `limit` integer
## Response `200`
List of Function objects.
- PaginatedFunctionResponse
- `items` FunctionResponse[], required — The pre-limited items in the list of results
- union
- FunctionAggregateMetrics
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'aggregate_metrics', required — Identifier of the Function. Always aggregate_metrics
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionAggregation
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'aggregation', required — Identifier of the Function. Always aggregation
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionAutoTimestamp
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'auto_timestamp', required — Identifier of the Function. Always auto_timestamp
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionCef
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'cef', required — Identifier of the Function. Always cef
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionChain
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'chain', required — Identifier of the Function. Always chain
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionClone
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'clone', required — Identifier of the Function. Always clone
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionCode
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'code', required — Identifier of the Function. Always code
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionComment
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'comment', required — Identifier of the Function. Always comment
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionDistinct
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'distinct', required — Identifier of the Function. Always distinct
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionDnsLookup
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'dns_lookup', required — Identifier of the Function. Always dns_lookup
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionDrop
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'drop', required — Identifier of the Function. Always drop
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionDropDimensions
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'drop_dimensions', required — Identifier of the Function. Always drop_dimensions
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionDynamicSampling
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'dynamic_sampling', required — Identifier of the Function. Always dynamic_sampling
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionEval
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'eval', required — Identifier of the Function. Always eval
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionEventBreaker
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'event_breaker', required — Identifier of the Function. Always event_breaker
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionEventstats
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'eventstats', required — Identifier of the Function. Always eventstats
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionExternaldata
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'externaldata', required — Identifier of the Function. Always externaldata
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionFlatten
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'flatten', required — Identifier of the Function. Always flatten
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionFoldkeys
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'foldkeys', required — Identifier of the Function. Always foldkeys
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionGenStats
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'gen_stats', required — Identifier of the Function. Always gen_stats
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionGeoip
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'geoip', required — Identifier of the Function. Always geoip
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionGrok
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'grok', required — Identifier of the Function. Always grok
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionHandlebars
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'handlebars', required — Identifier of the Function. Always handlebars
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionJoin
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'join', required — Identifier of the Function. Always join
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionJsonUnroll
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'json_unroll', required — Identifier of the Function. Always json_unroll
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionLakeExport
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'lake_export', required — Identifier of the Function. Always lake_export
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionLimit
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'limit', required — Identifier of the Function. Always limit
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionLocalSearchDatatypeParser
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'local_search_datatype_parser', required — Identifier of the Function. Always local_search_datatype_parser
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionLocalSearchRulesetRunner
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'local_search_ruleset_runner', required — Identifier of the Function. Always local_search_ruleset_runner
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionLocalSearchSchemaMapper
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'local_search_schema_mapper', required — Identifier of the Function. Always local_search_schema_mapper
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionLocalSearchTimeRangeNormalizer
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'local_search_time_range_normalizer', required — Identifier of the Function. Always local_search_time_range_normalizer
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionLocalSearchTransformer
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'local_search_transformer', required — Identifier of the Function. Always local_search_transformer
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionLookup
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'lookup', required — Identifier of the Function. Always lookup
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionMask
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'mask', required — Identifier of the Function. Always mask
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionMetricsExport
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'metrics_export', required — Identifier of the Function. Always metrics_export
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionMvExpand
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'mv_expand', required — Identifier of the Function. Always mv_expand
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionMvPull
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'mv_pull', required — Identifier of the Function. Always mv_pull
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionNotificationPolicies
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'notification_policies', required — Identifier of the Function. Always notification_policies
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionNotifications
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'notifications', required — Identifier of the Function. Always notifications
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionNotify
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'notify', required — Identifier of the Function. Always notify
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionNumerify
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'numerify', required — Identifier of the Function. Always numerify
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionOtlpLogs
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'otlp_logs', required — Identifier of the Function. Always otlp_logs
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionOtlpMetrics
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'otlp_metrics', required — Identifier of the Function. Always otlp_metrics
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionOtlpTraces
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'otlp_traces', required — Identifier of the Function. Always otlp_traces
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionPack
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'pack', required — Identifier of the Function. Always pack
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionPivot
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'pivot', required — Identifier of the Function. Always pivot
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionPublishMetrics
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'publish_metrics', required — Identifier of the Function. Always publish_metrics
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionRedis
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'redis', required — Identifier of the Function. Always redis
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionRegexExtract
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'regex_extract', required — Identifier of the Function. Always regex_extract
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionRegexFilter
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'regex_filter', required — Identifier of the Function. Always regex_filter
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionRename
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'rename', required — Identifier of the Function. Always rename
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionRollupMetrics
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'rollup_metrics', required — Identifier of the Function. Always rollup_metrics
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionSampling
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'sampling', required — Identifier of the Function. Always sampling
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionSearchEngineExport
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'search_engine_export', required — Identifier of the Function. Always search_engine_export
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionSend
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'send', required — Identifier of the Function. Always send
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionSensitiveDataScanner
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'sensitive_data_scanner', required — Identifier of the Function. Always sensitive_data_scanner
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionSerde
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'serde', required — Identifier of the Function. Always serde
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionSerialize
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'serialize', required — Identifier of the Function. Always serialize
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionSidlookup
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'sidlookup', required — Identifier of the Function. Always sidlookup
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionSnmpTrapSerialize
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'snmp_trap_serialize', required — Identifier of the Function. Always snmp_trap_serialize
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionSort
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'sort', required — Identifier of the Function. Always sort
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionStore
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'store', required — Identifier of the Function. Always store
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionSuppress
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'suppress', required — Identifier of the Function. Always suppress
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionTee
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'tee', required — Identifier of the Function. Always tee
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionTrimTimestamp
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'trim_timestamp', required — Identifier of the Function. Always trim_timestamp
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionUnion
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'union', required — Identifier of the Function. Always union
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionUnroll
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'unroll', required — Identifier of the Function. Always unroll
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionWindow
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'window', required — Identifier of the Function. Always window
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- FunctionXmlUnroll
- `__filename` string, required — Path to the JavaScript file that implements the Function.
- `asyncTimeout` number — Maximum time, in milliseconds, that the Function is allowed to run asynchronously before timing out.
- `cribl_version` string — Minimum Cribl version required by the Function, if applicable.
- `disabled` boolean — If true, the Function is disabled and will not execute in a Pipeline. Otherwise, false.
- `group` string, required — Category group the Function belongs to.
- `handleSignals` boolean — If true, the Function handles stream signals such as flush and close. Otherwise, false.
- `id` 'xml_unroll', required — Identifier of the Function. Always xml_unroll
- `loadTime` number, required — Time the Function module was loaded, in milliseconds since the Unix epoch.
- `modTime` number, required — Time the Function module was last modified, in milliseconds since the Unix epoch.
- `name` string, required — Display name of the Function.
- `sync` boolean — If true, the Function executes synchronously. Otherwise, false.
- `uischema` object, required — UI Schema that controls how the Function's configuration form is rendered.
- `version` string, required — Version string of the Function.
- `schema` object — JSON Schema document that describes the Function configuration.
- `count` integer, required — Number of items present in the items array
- `offset` integer — Pagination offset. Returned when offset/limit query parameters are provided.
- `limit` integer — Pagination limit. Returned when offset/limit query parameters are provided.
- `totalCount` integer — Total number of items available. Returned when offset/limit query parameters are provided.
## Other responses
- `401` — Authentication failed (missing or invalid credentials or Bearer token).
- `500` — Unexpected server error.
## Changes
- **2026-08-14** `f24e21d4ad84` — 2 info
- removed `signal_filter` discriminator mapping keys from the `items/items/` response property for the response status `200`
- removed `#/components/schemas/FunctionSignalFilter` from the `items/items/` response property `oneOf` list for the response status `200`
- **2026-07-21** `e9bef570d106` — 1 breaking, 13 info
- added `#/components/schemas/FunctionMetricsExport` to the `items/items/` response property `oneOf` list for the response status `200`
- added the new optional `query` request parameter `limit`
- added the new optional `query` request parameter `offset`
- added the new optional `query` request parameter `showHidden`
- …10 more
- **2026-05-14** `484cda0ad459` — 1 breaking, 1 info
- added `#/components/schemas/FunctionLocalSearchTimeRangeNormalizer, #/components/schemas/FunctionSearchEngineExport` to the `items/items/` response property `oneOf` list for the response status `200`
- added `local_search_time_range_normalizer, search_engine_export` discriminator mapping keys to the `items/items/` response property for the response status `200`
- **2026-04-18** `ca1214e6f476` — 1 breaking, 1 info
- added `#/components/schemas/FunctionLocalSearchSchemaMapper` to the `items/items/` response property `oneOf` list for the response status `200`
- added `local_search_schema_mapper` discriminator mapping keys to the `items/items/` response property for the response status `200`
- …earlier changes not shown
[Full history](https://skmtc.dev/criblio/apis/cribl-api-reference/changes/functions/get.md)
---
[API](https://skmtc.dev/criblio/apis/cribl-api-reference.md) · [All operations](https://skmtc.dev/criblio/apis/cribl-api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/criblio/cribl-api-reference/revisions/56cb25079271/schema)