Recall - Structured Logging

Query Syntax

Basic Syntax

Combine filters with spaces (AND). Use field:value format.

level:error since:1h "payment failed"

OR Operator

Use OR to match any of multiple conditions:

Errors or warnings:
level:error OR level:warn

Multiple services:
service:api OR service:worker

Available Filters

Filter	Example	Description
level:	level:error	debug, info, warn, error, fatal
level:	level:error,fatal	Multiple levels (comma-separated)
level:	level:!debug	Exclude level (negation)
since:	since:1h	Time ago: 15m, 1h, 7d, 2w
until:	until:30m	Before time ago
env:	env:production	Environment filter
service:	service:api	Service name
host:	host:web-01	Server hostname
commit:	commit:a1b2c3d	Git commit SHA
branch:	branch:main	Git branch
session:	session:abc123	Session ID
request:	request:req_xyz	Request ID

JSON Data Filters

Type	Example	Description
Exact	data.user_id:123	Exact value match
Nested	data.user.email:[email protected]	Nested JSON path
Wildcard	data.key:user:*	Pattern matching with *
Numeric	data.amount:>100	Comparison: >, <, >=, <=
Quoted	data.query:"SELECT * FROM"	Values with spaces

Commands (Pipe Syntax)

\| stats	Show count statistics
\| stats by:level	Group by level, commit, hour, day
\| first 50	First N results (oldest first)

Examples

Errors in last hour:
level:error since:1h

Payment issues for user:
"payment" data.user_id:123 level:error,warn

Stats by level in production:
env:production since:24h | stats by:level

25 logs Live tail

06:51:41 Slow SQL query: Session Update (175.91ms)

06:51:41 Slow SQL query: User Load (161.7ms)

06:51:41 Slow SQL query: Noticed::Notification Exists? (141.49ms)

06:51:41 Potential N+1 query detected

06:51:41 Slow SQL query: Session Load (101.26ms)

06:51:41 Slow SQL query: Session Update (160.17ms)

06:51:41 Slow SQL query: Noticed::Notification Count (150.57ms)

06:51:41 Slow SQL query: Session Update (199.76ms)

06:51:41 Slow SQL query: Session Load (200.88ms)

06:51:41 Slow SQL query: Session Load (243.85ms)

06:51:41 Slow template render: Onboarding::ShowView (523.24ms)

06:51:41 Slow SQL query: OnboardingMessage Load (386.12ms)

06:51:41 Slow request: Admin::BlockReasonsController#index (12570.48ms)

06:51:41 Slow SQL query: SolidCache::Entry Load (112.01ms)

06:51:41 Slow SQL query: SolidCable::Message Load (287.01ms)

06:51:41 Slow SQL query: SolidCache::Entry Load (3127.28ms)

06:51:40 Slow request: Admin::AnalyticsController#index (13905.96ms)

06:51:40 Slow SQL query: SolidCache::Entry Load (161.27ms)

06:51:40 Slow SQL query: OnboardingMessage Exists? (159.28ms)

06:51:40 Slow request: Admin::ConfigsController#index (17552.31ms)

06:51:40 Slow SQL query: SolidCache::Entry Load (298.9ms)

06:51:40 Slow SQL query: SolidCache::Entry Load (3034.27ms)

06:51:40 Slow SQL query: OnboardingConversation Load (183.98ms)

06:51:40 Potential N+1 query detected

06:51:40 Slow SQL query: AiQuery Count (162.31ms)

Loading more logs...

Save Search