Save Search
Query Syntax
Basic Syntax
Combine filters with spaces (AND). Use field:value format.
level:error since:1h "payment failed"
OR Operator
Use OR to match any of multiple conditions:
Errors or warnings:
level:error OR level:warn
level:error OR level:warn
Multiple services:
service:api OR service:worker
service:api OR service:worker
Available Filters
| Filter | Example | Description |
|---|---|---|
| level: | level:error | debug, info, warn, error, fatal |
| level: | level:error,fatal | Multiple levels (comma-separated) |
| level: | level:!debug | Exclude level (negation) |
| since: | since:1h | Time ago: 15m, 1h, 7d, 2w |
| until: | until:30m | Before time ago |
| env: | env:production | Environment filter |
| service: | service:api | Service name |
| host: | host:web-01 | Server hostname |
| commit: | commit:a1b2c3d | Git commit SHA |
| branch: | branch:main | Git branch |
| session: | session:abc123 | Session ID |
| request: | request:req_xyz | Request ID |
JSON Data Filters
| Type | Example | Description |
|---|---|---|
| Exact | data.user_id:123 | Exact value match |
| Nested | data.user.email:[email protected] | Nested JSON path |
| Wildcard | data.key:user:* | Pattern matching with * |
| Numeric | data.amount:>100 | Comparison: >, <, >=, <= |
| Quoted | data.query:"SELECT * FROM" | Values with spaces |
Commands (Pipe Syntax)
| | stats | Show count statistics |
| | stats by:level | Group by level, commit, hour, day |
| | first 50 | First N results (oldest first) |
Examples
Errors in last hour:
level:error since:1h
level:error since:1h
Payment issues for user:
"payment" data.user_id:123 level:error,warn
"payment" data.user_id:123 level:error,warn
Stats by level in production:
env:production since:24h | stats by:level
env:production since:24h | stats by:level
Export Logs
0 logs
No logs found