ServerOps.ggbeta
API ReferenceLogs

List datasets

List every active (non-archived) dataset in the authenticated project, with each dataset's 24-hour event count (from the per-minute rollup) and configured retention.

The dashboard uses this to populate the dataset selector and the index page.

The reserved default dataset, when present, appears in this list like any other but is system-managed: it cannot be renamed or archived (see PATCH /datasets/{name} and DELETE /datasets/{name}). It is created lazily the first time a customer hits their plan's dataset cap and an event overflows into it.

Requires logs:read scope.

GET
/datasets

Authorization

bearerAuth logs:read
AuthorizationBearer <token>

API token from your dashboard.

Format: so_live_... (production) or so_test_... (test mode).

Tokens carry one or more scopes. Request only the scopes your integration needs:

ScopeGrants
media:readList and retrieve files
media:writeUpload and delete files
logs:readRead log entries
logs:writeIngest log entries
cases:readRead cases
cases:writeCreate and update cases
apps:readRead apps
apps:writeSubmit apps
usage:readRead quota usage
members:readList organisation members
members:writeInvite and remove members
billing:readRead billing and subscription info
tokens:writeCreate and revoke API tokens

In: header

Scope: logs:read

Response Body

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/datasets"
{
  "datasets": [
    {
      "name": "security",
      "retention_days": 90,
      "events_last_24h": 12453,
      "default_severity": "warn",
      "created_at": "2026-04-15T10:30:00Z"
    },
    {
      "name": "chat",
      "retention_days": 30,
      "events_last_24h": 845230,
      "created_at": "2026-04-15T10:30:00Z"
    }
  ]
}
{
  "error": {
    "code": "unauthorized",
    "message": "missing or invalid authorization token"
  }
}

{
  "error": {
    "code": "forbidden",
    "message": "token does not have the required scope"
  }
}

{
  "error": {
    "code": "internal",
    "message": "an unexpected error occurred"
  }
}