Save Search
Query Syntax
Basic Syntax
Combine filters with spaces (AND). Use field:value format.
level:error since:1h "payment failed"
OR Operator
Use OR to match any of multiple conditions:
Errors or warnings:
level:error OR level:warn
level:error OR level:warn
Multiple services:
service:api OR service:worker
service:api OR service:worker
Available Filters
| Filter | Example | Description |
|---|---|---|
| level: | level:error | debug, info, warn, error, fatal |
| level: | level:error,fatal | Multiple levels (comma-separated) |
| level: | level:!debug | Exclude level (negation) |
| since: | since:1h | Time ago: 15m, 1h, 7d, 2w |
| until: | until:30m | Before time ago |
| env: | env:production | Environment filter |
| service: | service:api | Service name |
| host: | host:web-01 | Server hostname |
| commit: | commit:a1b2c3d | Git commit SHA |
| branch: | branch:main | Git branch |
| session: | session:abc123 | Session ID |
| request: | request:req_xyz | Request ID |
JSON Data Filters
| Type | Example | Description |
|---|---|---|
| Exact | data.user_id:123 | Exact value match |
| Nested | data.user.email:[email protected] | Nested JSON path |
| Wildcard | data.key:user:* | Pattern matching with * |
| Numeric | data.amount:>100 | Comparison: >, <, >=, <= |
| Quoted | data.query:"SELECT * FROM" | Values with spaces |
Commands (Pipe Syntax)
| | stats | Show count statistics |
| | stats by:level | Group by level, commit, hour, day |
| | first 50 | First N results (oldest first) |
Examples
Errors in last hour:
level:error since:1h
level:error since:1h
Payment issues for user:
"payment" data.user_id:123 level:error,warn
"payment" data.user_id:123 level:error,warn
Stats by level in production:
env:production since:24h | stats by:level
env:production since:24h | stats by:level
Export Logs
25 logs
18:16:42
Slow SQL query: SolidQueue::Pause Pluck (2064.33ms)
Loading details...
18:16:10
Slow template render: Pages::FeaturesView (485.15ms)
Loading details...
18:15:40
Slow SQL query: SolidQueue::Process Create (1026.69ms)
Loading details...
18:15:40
Slow SQL query: SolidQueue::Process Create (1196.09ms)
Loading details...
18:10:59
Slow SQL query: SolidQueue::Pause Pluck (1329.25ms)
Loading details...
18:06:32
Slow request: Admin::UsersController#index (3276.79ms)
Loading details...
18:06:32
Slow request: LegislationController#index (2521.71ms)
Loading details...
18:06:32
Slow template render: Admin::Users::IndexView (947.48ms)
Loading details...
18:06:31
Slow template render: Legislation::IndexView (589.33ms)
Loading details...
18:06:31
Slow request: DashboardController#index (2937.3ms)
Loading details...
18:06:31
Slow request: ClientsController#index (2202.29ms)
Loading details...
18:06:30
Slow template render: Dashboard::IndexView (261.34ms)
Loading details...
18:06:29
Slow template render: Clients::IndexView (215.13ms)
Loading details...
18:06:17
Slow request: Ai::ResearchController#index (3264.61ms)
Loading details...
18:06:17
Slow request: Ai::ResearchController#index (2170.87ms)
Loading details...
18:06:17
Slow cache write: production:fingerprint_track:3:206.62.142.217 (255.32ms)
Loading details...
18:06:16
Slow template render: Ai::ResearchView (210.22ms)
Loading details...
18:06:16
Slow template render: Ai::ResearchView (353.66ms)
Loading details...
18:05:27
Slow template render: Clients::IndexView (425.42ms)
Loading details...
18:05:27
Slow template render: LegalCases::IndexView (206.73ms)
Loading details...
18:05:05
Slow request: NotificationsController#index (6759.75ms)
Loading details...
18:05:05
Slow SQL query: SolidCache::Entry Load (2301.02ms)
Loading details...
18:05:05
Slow request: LegalCasesController#index (3620.16ms)
Loading details...
18:05:05
Slow request: DashboardController#index (6572.43ms)
Loading details...
18:05:04
Slow template render: LegalCases::IndexView (515.32ms)
Loading details...
Loading more logs...