Recall - Structured Logging

Query Syntax

Basic Syntax

Combine filters with spaces (AND). Use field:value format.

level:error since:1h "payment failed"

OR Operator

Use OR to match any of multiple conditions:

Errors or warnings:
level:error OR level:warn

Multiple services:
service:api OR service:worker

Available Filters

Filter	Example	Description
level:	level:error	debug, info, warn, error, fatal
level:	level:error,fatal	Multiple levels (comma-separated)
level:	level:!debug	Exclude level (negation)
since:	since:1h	Time ago: 15m, 1h, 7d, 2w
until:	until:30m	Before time ago
env:	env:production	Environment filter
service:	service:api	Service name
host:	host:web-01	Server hostname
commit:	commit:a1b2c3d	Git commit SHA
branch:	branch:main	Git branch
session:	session:abc123	Session ID
request:	request:req_xyz	Request ID

JSON Data Filters

Type	Example	Description
Exact	data.user_id:123	Exact value match
Nested	data.user.email:[email protected]	Nested JSON path
Wildcard	data.key:user:*	Pattern matching with *
Numeric	data.amount:>100	Comparison: >, <, >=, <=
Quoted	data.query:"SELECT * FROM"	Values with spaces

Commands (Pipe Syntax)

\| stats	Show count statistics
\| stats by:level	Group by level, commit, hour, day
\| first 50	First N results (oldest first)

Examples

Errors in last hour:
level:error since:1h

Payment issues for user:
"payment" data.user_id:123 level:error,warn

Stats by level in production:
env:production since:24h | stats by:level

25 logs Live tail

18:16:42 Slow SQL query: SolidQueue::Pause Pluck (2064.33ms)

18:16:10 Slow template render: Pages::FeaturesView (485.15ms)

18:15:40 Slow SQL query: SolidQueue::Process Create (1026.69ms)

18:15:40 Slow SQL query: SolidQueue::Process Create (1196.09ms)

18:10:59 Slow SQL query: SolidQueue::Pause Pluck (1329.25ms)

18:06:32 Slow request: Admin::UsersController#index (3276.79ms)

18:06:32 Slow request: LegislationController#index (2521.71ms)

18:06:32 Slow template render: Admin::Users::IndexView (947.48ms)

18:06:31 Slow template render: Legislation::IndexView (589.33ms)

18:06:31 Slow request: DashboardController#index (2937.3ms)

18:06:31 Slow request: ClientsController#index (2202.29ms)

18:06:30 Slow template render: Dashboard::IndexView (261.34ms)

18:06:29 Slow template render: Clients::IndexView (215.13ms)

18:06:17 Slow request: Ai::ResearchController#index (3264.61ms)

18:06:17 Slow request: Ai::ResearchController#index (2170.87ms)

18:06:17 Slow cache write: production:fingerprint_track:3:206.62.142.217 (255.32ms)

18:06:16 Slow template render: Ai::ResearchView (210.22ms)

18:06:16 Slow template render: Ai::ResearchView (353.66ms)

18:05:27 Slow template render: Clients::IndexView (425.42ms)

18:05:27 Slow template render: LegalCases::IndexView (206.73ms)

18:05:05 Slow request: NotificationsController#index (6759.75ms)

18:05:05 Slow SQL query: SolidCache::Entry Load (2301.02ms)

18:05:05 Slow request: LegalCasesController#index (3620.16ms)

18:05:05 Slow request: DashboardController#index (6572.43ms)

18:05:04 Slow template render: LegalCases::IndexView (515.32ms)

Loading more logs...

Save Search