Graylog Event Definition and Event Notification API (Graylog v3.1.2) https://github.com/suzuki-shunsuke/go-graylog/issues/170

create-event-definition.sh

curl -u admin:admin -H 'Content-Type: application/json' -H 'Accept: application/json' -H 'X-Requested-By: api' -X POST 'http://127.0.0.1:9000/api/events/definitions?pretty=true' -d '
{
  "title": "new-event-definition",
  "description": "",
  "priority": 2,
  "alert": true,
  "config": {
    "type": "aggregation-v1",
    "query": "test",
    "streams": [
      "000000000000000000000001"
    ],
    "group_by": [],
    "series": [],
    "conditions": {
      "expression": null
    },
    "search_within_ms": 60000,
    "execute_every_ms": 60000
  },
  "field_spec": {
    "test": {
      "data_type": "string",
      "providers": [
        {
          "type": "template-v1",
          "template": "test",
          "require_values": false
        }
      ]
    }
  },
  "key_spec": [],
  "notification_settings": {
    "grace_period_ms": 0,
    "backlog_size": 0
  },
  "notifications": [
    {
      "notification_id": "5de5a365a1de18000cdfdf49",
      "notification_parameters": null
    }
  ],
  "storage": [
    {
      "type": "persist-to-streams-v1",
      "streams": [
        "000000000000000000000002"
      ]
    }
  ]
}
'

create-event-notification.sh

curl -u admin:admin -H 'Content-Type: application/json' -H 'Accept: application/json' -H 'X-Requested-By: api' -X POST 'http://127.0.0.1:9000/api/events/notifications?pretty=true' -d '
{
  "title": "new-notification-2",
  "description": "",
  "config": {
    "type": "http-notification-v1",
    "url": "http://example.com"
  }
}
'

update-event-definition.sh

curl -u admin:admin -H 'Content-Type: application/json' -H 'Accept: application/json' -H 'X-Requested-By: api' -X PUT 'http://127.0.0.1:9000/api/events/definitions/5de5aac1a1de18000cdfe2b3?pretty=true' -d '
{
  "id": "5de5aac1a1de18000cdfe2b3",
  "title": "new-event-definition",
  "description": "",
  "priority": 2,
  "alert": true,
  "config": {
    "type": "aggregation-v1",
    "query": "test",
    "streams": [
      "000000000000000000000001"
    ],
    "group_by": [],
    "series": [],
    "conditions": {
      "expression": null
    },
    "search_within_ms": 60000,
    "execute_every_ms": 60000
  },
  "field_spec": {
    "test": {
      "data_type": "string",
      "providers": [
        {
          "type": "template-v1",
          "template": "test",
          "require_values": false
        }
      ]
    }
  },
  "key_spec": [],
  "notification_settings": {
    "grace_period_ms": 0,
    "backlog_size": 0
  },
  "notifications": [
    {
      "notification_id": "5de5a365a1de18000cdfdf49",
      "notification_parameters": null
    }
  ],
  "storage": [
    {
      "type": "persist-to-streams-v1",
      "streams": [
        "000000000000000000000002"
      ]
    }
  ]
}
'

update-event-notification.sh

curl -u admin:admin -H 'Content-Type: application/json' -H 'Accept: application/json' -H 'X-Requested-By: api' -X PUT 'http://127.0.0.1:9000/api/events/notifications/5de5a365a1de18000cdfdf49?pretty=true' -d '
{
  "id" : "5de5a365a1de18000cdfdf49",
  "title": "new-notification-2",
  "description": "updated",
  "config": {
    "type": "http-notification-v1",
    "url": "http://example.com"
  }
}
'