Recall - Structured Logging

Combine filters with spaces (AND). Use field:value format.

level:error since:1h "payment failed"

Use OR to match any of multiple conditions:

Errors or warnings:
level:error OR level:warn

Multiple services:
service:api OR service:worker

Filter	Example	Description
level:	level:error	debug, info, warn, error, fatal
level:	level:error,fatal	Multiple levels (comma-separated)
level:	level:!debug	Exclude level (negation)
since:	since:1h	Time ago: 15m, 1h, 7d, 2w
until:	until:30m	Before time ago
env:	env:production	Environment filter
service:	service:api	Service name
host:	host:web-01	Server hostname
commit:	commit:a1b2c3d	Git commit SHA
branch:	branch:main	Git branch
session:	session:abc123	Session ID
request:	request:req_xyz	Request ID

Type	Example	Description
Exact	data.user_id:123	Exact value match
Nested	data.user.email:[email protected]	Nested JSON path
Wildcard	data.key:user:*	Pattern matching with *
Numeric	data.amount:>100	Comparison: >, <, >=, <=
Quoted	data.query:"SELECT * FROM"	Values with spaces

\| stats	Show count statistics
\| stats by:level	Group by level, commit, hour, day
\| first 50	First N results (oldest first)

Errors in last hour:
level:error since:1h

Payment issues for user:
"payment" data.user_id:123 level:error,warn

Stats by level in production:
env:production since:24h | stats by:level

25 logs Live tail

06:30:29 Potential N+1 query detected

06:30:00 Potential N+1 query detected

06:30:00 Database transaction rollback

06:29:29 Potential N+1 query detected

06:28:29 Potential N+1 query detected

06:24:29 Potential N+1 query detected

06:20:29 Potential N+1 query detected

06:19:29 Potential N+1 query detected

06:17:29 Potential N+1 query detected

06:15:29 Potential N+1 query detected

06:14:29 Potential N+1 query detected

06:13:29 Potential N+1 query detected

06:13:28 Potential N+1 query detected

06:12:00 Database transaction rollback

06:11:29 Potential N+1 query detected

06:10:29 Potential N+1 query detected

06:09:29 Potential N+1 query detected

06:06:29 Potential N+1 query detected

Loading more logs...