[text search] [field:value]... [| command]

"payment failed"

error timeout

level:error
environment:production
service:api

since:1h          # Last hour
since:24h         # Last 24 hours
since:7d          # Last 7 days
since:30m         # Last 30 minutes

until:2024-01-01  # Before a date

since:7d until:1d   # Between 7 days ago and 1 day ago

data.user.id:123
data.order.total:>100
data.payment.status:failed

data.amount:100       # Equals
data.amount:>100      # Greater than
data.amount:>=100     # Greater than or equal
data.amount:<100      # Less than
data.amount:<=100     # Less than or equal

level:!debug          # Not debug
env:!test             # Not test
data.user.role:!admin # User is not admin

level:error env:production since:1h

level:error,warn,fatal

level:error since:24h | stats
level:error | stats by:hour
level:error | stats by:commit

since:1h | sort timestamp:asc
since:1h | sort data.duration_ms:desc

level:error | first 10    # Oldest 10
level:error | last 50     # Newest 50 (default)

level:error env:production since:1h

data.duration_ms:>1000 since:24h

data.user.id:12345 since:7d

"payment" level:error data.amount:>100

level:error since:24h | stats by:commit

request_id:abc-123-def

curl https://recall.brainzlab.ai/api/v1/logs \
  -H "Authorization: Bearer sk_live_xxx" \
  -G --data-urlencode "query=level:error since:1h"