Recall - Structured Logging

Query Syntax

Basic Syntax

Combine filters with spaces (AND). Use field:value format.

level:error since:1h "payment failed"

OR Operator

Use OR to match any of multiple conditions:

Errors or warnings:
level:error OR level:warn

Multiple services:
service:api OR service:worker

Available Filters

Filter	Example	Description
level:	level:error	debug, info, warn, error, fatal
level:	level:error,fatal	Multiple levels (comma-separated)
level:	level:!debug	Exclude level (negation)
since:	since:1h	Time ago: 15m, 1h, 7d, 2w
until:	until:30m	Before time ago
env:	env:production	Environment filter
service:	service:api	Service name
host:	host:web-01	Server hostname
commit:	commit:a1b2c3d	Git commit SHA
branch:	branch:main	Git branch
session:	session:abc123	Session ID
request:	request:req_xyz	Request ID

JSON Data Filters

Type	Example	Description
Exact	data.user_id:123	Exact value match
Nested	data.user.email:[email protected]	Nested JSON path
Wildcard	data.key:user:*	Pattern matching with *
Numeric	data.amount:>100	Comparison: >, <, >=, <=
Quoted	data.query:"SELECT * FROM"	Values with spaces

Commands (Pipe Syntax)

\| stats	Show count statistics
\| stats by:level	Group by level, commit, hour, day
\| first 50	First N results (oldest first)

Examples

Errors in last hour:
level:error since:1h

Payment issues for user:
"payment" data.user_id:123 level:error,warn

Stats by level in production:
env:production since:24h | stats by:level

25 logs Live tail

22:30:01 Slow cache write: production:cost_alerts:last_result (70.91ms)

22:30:01 Slow cache write: production:cost_alerts:last_check (191.78ms)

21:30:01 Slow cache write: production:cost_alerts:last_result (51.32ms)

21:30:01 Slow cache write: production:cost_alerts:last_check (260.75ms)

20:30:01 Slow cache write: production:cost_alerts:last_result (84.02ms)

20:30:01 Slow cache write: production:cost_alerts:last_check (225.17ms)

19:30:02 Slow cache write: production:cost_alerts:last_result (91.32ms)

19:30:02 Slow cache write: production:cost_alerts:last_check (597.94ms)

18:34:48 Slow template render: Pages::PricingView (250.41ms)

18:30:07 Slow cache write: production:cost_alerts:last_check (558.19ms)

18:16:42 Slow SQL query: SolidQueue::Pause Pluck (2064.33ms)

18:16:10 Slow template render: Pages::FeaturesView (485.15ms)

18:15:40 Slow SQL query: SolidQueue::Process Create (1026.69ms)

18:15:40 Slow SQL query: SolidQueue::Process Create (1196.09ms)

18:10:59 Slow SQL query: SolidQueue::Pause Pluck (1329.25ms)

18:06:32 Slow request: Admin::UsersController#index (3276.79ms)

18:06:32 Slow request: LegislationController#index (2521.71ms)

18:06:32 Slow template render: Admin::Users::IndexView (947.48ms)

18:06:31 Slow template render: Legislation::IndexView (589.33ms)

18:06:31 Slow request: DashboardController#index (2937.3ms)

18:06:31 Slow request: ClientsController#index (2202.29ms)

18:06:30 Slow template render: Dashboard::IndexView (261.34ms)

18:06:29 Slow template render: Clients::IndexView (215.13ms)

18:06:17 Slow request: Ai::ResearchController#index (3264.61ms)

18:06:17 Slow request: Ai::ResearchController#index (2170.87ms)

Loading more logs...

Save Search