> ## Documentation Index > Fetch the complete documentation index at: https://docs.flashduty.com/llms.txt > Use this file to discover all available pages before exploring further. # Resolve panel queries > Bind panel queries to datasources and substitute variables without executing them. ## OpenAPI ````yaml /api-reference/monitors.openapi.en.json post /monit/dashboard/runtime/queries/resolve openapi: 3.1.0 info: title: Flashduty Open API description: >- Public HTTP API for the Flashduty incident management platform — incidents, notification templates, channels, schedules, monitors, RUM, and platform administration. Every operation is authenticated with an `app_key` query parameter issued from the Flashduty console under Account → APP Keys. Responses follow a uniform envelope: `{ request_id, data }` on success, `{ request_id, error }` on failure. version: 1.0.0 servers: - url: https://api.flashcat.cloud description: Flashduty Open API security: - AppKeyAuth: [] tags: - name: Monitors/Alert rules description: >- Create, manage, and export monitor alert rules. Query rule counters and audit history. - name: Monitors/Data sources description: Manage monitoring data sources used by alert rules to query metrics. - name: Monitors/Diagnostics description: >- Diagnostic and query endpoints used by Flashduty AI SRE — ad-hoc data source queries, log/metric diagnostics, and target-side tool invocation. - name: Monitors/Monitor utilities description: Monitors service activation and data preview utilities. - name: Monitors/Dashboards description: >- Create, search, version and run Monitors dashboards, and resolve their variables and queries. - name: Monitors/Rule folders description: >- List the monitor folder tree that dashboards and alert rules are organised in. paths: /monit/dashboard/runtime/queries/resolve: post: tags: - Monitors/Dashboards summary: Resolve panel queries description: >- Bind panel queries to datasources and substitute variables without executing them. operationId: monit-dashboard-query-read-resolve requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/DashboardQueriesResolveRequest' example: dashboard_id: 01990d7a-9c5b-7ab0-9c18-33e38f6f2101 panel_ids: - 01990d7a-9c5b-7ab0-9c18-33e38f6f2404 time: from_ms: 1791100800000 to_ms: 1791104400000 variables: env: kind: values values: - prod responses: '200': description: Success content: application/json: schema: allOf: - $ref: '#/components/schemas/SuccessEnvelope' - type: object properties: data: $ref: '#/components/schemas/DashboardQueriesResolveResponse' example: request_id: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 data: dashboard_id: 01990d7a-9c5b-7ab0-9c18-33e38f6f2101 revision: 7 time: from_ms: 1791100800000 to_ms: 1791104400000 variables: env: kind: values values: - prod panels: - panel_id: 01990d7a-9c5b-7ab0-9c18-33e38f6f2404 state: success queries: - ref_id: A datasource: id: 10 type: prometheus name: Prometheus Prod mode: range expr: sum(rate(http_requests_total{env="prod"}[5m])) args: {} min_step_seconds: 30 '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '404': $ref: '#/components/responses/NotFound' '429': $ref: '#/components/responses/TooManyRequests' '500': $ref: '#/components/responses/ServerError' components: schemas: DashboardQueriesResolveRequest: type: object description: >- Resolve the queries of selected panels without executing them, so a client can preview datasource binding and variable substitution. properties: dashboard_id: type: string pattern: >- ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$ description: Canonical UUIDv7 of the dashboard. panel_ids: type: array items: type: string pattern: >- ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$ minItems: 1 maxItems: 100 description: >- Panels to resolve, 1–100 unique IDs. A panel that does not exist yields an `error` arm rather than failing the call. time: $ref: '#/components/schemas/DashboardAbsoluteTimeRange' variables: type: object additionalProperties: $ref: '#/components/schemas/DashboardSelection' description: Selections keyed by variable name, at most 20 entries. required: - dashboard_id - panel_ids - time - variables SuccessEnvelope: type: object description: >- Success response envelope. On every 2xx response, `request_id` identifies the call (also mirrored in the `Flashcat-Request-Id` header) and `data` holds the endpoint-specific payload. Failure responses use a different shape — see `ErrorResponse`. properties: request_id: type: string description: >- Unique ID for this request. Mirrored in the Flashcat-Request-Id response header. Include it when reporting issues. example: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 data: description: Endpoint-specific payload. See each operation's 200 response schema. required: - request_id - data DashboardQueriesResolveResponse: type: object description: One entry per requested panel, in request order. properties: dashboard_id: type: string pattern: >- ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$ description: Dashboard ID. revision: type: integer format: uint64 minimum: 1 description: Revision the resolution ran against. time: $ref: '#/components/schemas/DashboardAbsoluteTimeRange' variables: type: object additionalProperties: $ref: '#/components/schemas/DashboardSelection' description: Selections that resolved successfully. panels: type: array items: $ref: '#/components/schemas/DashboardResolvedPanelQueries' description: Per-panel results. required: - dashboard_id - revision - time - variables - panels DashboardAbsoluteTimeRange: type: object description: >- Absolute evaluation window. Both bounds are Unix timestamps in milliseconds, `from_ms` must be less than `to_ms`, and neither may exceed the JavaScript safe integer limit. properties: from_ms: type: integer format: int64 minimum: 0 description: Unix timestamp in milliseconds. to_ms: type: integer format: int64 minimum: 1 description: Unix timestamp in milliseconds. required: - from_ms - to_ms DashboardSelection: type: object description: >- A concrete selection of variable values. An empty `values` array is valid wire input and means unresolved — the server never substitutes a default for it. properties: kind: type: string enum: - values - all description: >- `values` selects the listed entries, `all` selects everything (only allowed when `include_all` is true). values: type: array items: type: string minLength: 1 maxLength: 1024 maxItems: 1000 description: >- Selected values, unique and never `$__all`. Must be empty when `kind` is `all`. required: - kind DashboardResolvedPanelQueries: type: object description: >- Per-panel resolution result. `state` is `success` when every query resolved, `partial` when some did and `error` when none did. properties: panel_id: type: string pattern: >- ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$ description: Panel ID. state: type: string enum: - success - partial - error description: >- Aggregate state of the panel's queries: `success` = every query resolved; `partial` = some resolved; `error` = none resolved. queries: type: array items: $ref: '#/components/schemas/DashboardResolvedQuery' description: Successfully resolved queries. error: $ref: '#/components/schemas/DashboardRuntimeError' required: - panel_id - state - queries ErrorResponse: type: object description: Response envelope for errors. `error` is required; `data` is absent. properties: request_id: type: string example: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 description: >- Unique trace ID of this request; include it when reporting issues so logs can be located. error: $ref: '#/components/schemas/DutyError' required: - request_id - error DashboardResolvedQuery: type: object description: One query bound to a concrete datasource with its variables substituted. properties: ref_id: type: string pattern: ^[A-Z]$ description: Panel-local query reference. datasource: $ref: '#/components/schemas/DashboardRuntimeDatasource' mode: type: string enum: - range - instant - window description: >- Evaluation mode: `range` = a stepped time series; `instant` = a single point in time; `window` = raw rows inside a bounded time window. expr: type: string description: Expression with variable templates substituted. args: type: object additionalProperties: type: string description: Query arguments; empty object when none. min_step_seconds: type: - integer - 'null' format: int64 minimum: 1 description: Minimum step in seconds; null when unset. required: - ref_id - datasource - mode - expr - args DashboardRuntimeError: type: object description: >- Per-variable or per-query failure. A failed arm does not fail the whole call. properties: reason: type: string description: >- Machine-readable failure reason. Observed values include `invalid_request`, `variable_invalid`, `panel_missing`, `field_missing`, `datasource_permission_denied`, `timeout`, `panel_deadline`, `panel_canceled`, `canceled`, `overloaded`, `source_too_large`, `edge_unavailable`, `edge_upgrade_required`, `edge_version_unknown`, `mixed_edge_versions` and `internal`. message: type: string description: Human-readable detail for the failure. required: - reason - message DutyError: type: object description: >- Error payload inside the response envelope. Present only on non-2xx responses. properties: code: $ref: '#/components/schemas/ErrorCode' message: type: string description: >- Human-readable error message, localized by the caller's Accept-Language. May contain field names, IDs, or other context from the failing request. example: The specified parameter template_id is not valid. reason: description: >- Optional machine-readable rejection reason, including datasource tool failures. Inspect alongside HTTP status and code. type: string x-flashduty-preserve-absence: true required: - code - message DashboardRuntimeDatasource: type: object description: The datasource a runtime query was bound to. properties: id: type: integer format: uint64 minimum: 1 description: Datasource ID. type: type: string pattern: ^[a-z][a-z0-9_]{0,63}$ description: Datasource type identifier. name: type: string description: Datasource name. required: - id - type - name ErrorCode: type: string description: >- Flashduty error code enum. Every failed API response sets `error.code` to one of these stable wire strings. HTTP status is informational — the authoritative signal is the enum value. | Code | HTTP | Meaning | |---|---|---| | `OK` | 200 | Reserved — not returned on real errors. | | `InvalidParameter` | 400 | A required parameter is missing or failed validation. | | `BadRequest` | 400 | Generic 400 used when no more specific code fits. | | `InvalidContentType` | 400 | The `Content-Type` header is not `application/json`. | | `ResourceNotFound` | 400 | The referenced resource does not exist. Note: returned as HTTP 400, not 404 (historical choice). | | `NoLicense` | 400 | The feature is license-gated and no active license was found. | | `ReferenceExist` | 400 | Deletion blocked — other entities still reference this resource. | | `Unauthorized` | 401 | `app_key` is missing, invalid, or expired. | | `BalanceNotEnough` | 402 | Billing-gated operation with insufficient account balance. | | `AccessDenied` | 403 | Authenticated but lacking the permission required for this operation. | | `RouteNotFound` | 404 | The request URL path is not a known route. | | `MethodNotAllowed` | 405 | The HTTP method is not allowed on this otherwise-known path. | | `UndonedOrderExist` | 409 | An outstanding billing order blocks this new one. Wait and retry. | | `RequestLocked` | 423 | Operation temporarily locked due to repeated failures. | | `EntityTooLarge` | 413 | Request body exceeds the configured max size. | | `RequestTooFrequently` | 429 | Rate limit hit — API-global, per-account, or per-integration. | | `RequestVerifyRequired` | 428 | Second-factor verification required but not supplied. | | `DangerousOperation` | 428 | High-risk operation requires MFA verification. | | `InternalError` | 500 | Unhandled server-side error. Include `request_id` in the bug report. | | `ServiceUnavailable` | 503 | A backend dependency is unavailable. Try again later. | enum: - OK - InvalidParameter - BadRequest - InvalidContentType - ResourceNotFound - NoLicense - ReferenceExist - Unauthorized - BalanceNotEnough - AccessDenied - RouteNotFound - MethodNotAllowed - UndonedOrderExist - RequestLocked - EntityTooLarge - RequestTooFrequently - RequestVerifyRequired - DangerousOperation - InternalError - ServiceUnavailable x-enumDescriptions: OK: Reserved — not returned on real errors. InvalidParameter: A required parameter is missing or failed validation. BadRequest: Generic 400 used when no more specific code fits. InvalidContentType: The `Content-Type` header is not `application/json`. ResourceNotFound: >- The referenced resource does not exist. Note: returned as HTTP 400, not 404 (historical choice). NoLicense: The feature is license-gated and no active license was found. ReferenceExist: Deletion blocked — other entities still reference this resource. Unauthorized: '`app_key` is missing, invalid, or expired.' BalanceNotEnough: Billing-gated operation with insufficient account balance. AccessDenied: Authenticated but lacking the permission required for this operation. RouteNotFound: The request URL path is not a known route. MethodNotAllowed: The HTTP method is not allowed on this otherwise-known path. UndonedOrderExist: An outstanding billing order blocks this new one. Wait and retry. RequestLocked: Operation temporarily locked due to repeated failures. EntityTooLarge: Request body exceeds the configured max size. RequestTooFrequently: Rate limit hit — API-global, per-account, or per-integration. RequestVerifyRequired: Second-factor verification required but not supplied. DangerousOperation: High-risk operation requires MFA verification. InternalError: Unhandled server-side error. Include `request_id` in the bug report. ServiceUnavailable: A backend dependency is unavailable. Try again later. example: InvalidParameter responses: BadRequest: description: Invalid request — usually a missing or malformed parameter. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: missingParameter: value: request_id: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 error: code: InvalidParameter message: The specified parameter is not valid. Unauthorized: description: Missing or invalid app_key. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: missingAppKey: value: request_id: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 error: code: Unauthorized message: You are unauthorized. Forbidden: description: The app_key is valid but lacks permission for this operation. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: noEditPermission: value: request_id: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 error: code: AccessDenied message: Access Denied. NotFound: description: >- The referenced resource does not exist or has been deleted. Note: Flashduty historically returns HTTP 400 with code `ResourceNotFound` for missing domain entities; a true 404 is reserved for unknown routes. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: resourceMissing: value: request_id: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 error: code: ResourceNotFound message: The resource you request is not found TooManyRequests: description: >- Rate limit hit. Either the global API limit, a per-account limit, or a per-integration limit. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: rateLimited: value: request_id: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 error: code: RequestTooFrequently message: Request too frequently. ServerError: description: Unexpected server-side error. Include the request_id when reporting. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: internal: value: request_id: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 error: code: InternalError message: >- We encountered an internal error, and it has been reported. Please try again later. securitySchemes: AppKeyAuth: type: apiKey in: query name: app_key description: >- App key issued from the Flashduty console under Account → APP Keys. Required on every public API call. Keep it secret — it grants the same access as the owning account. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.