Docs
Search syntax
Type words to find them in messages, and fields to narrow by level, service, status and more. Terms are combined with AND.
Words and phrases
| Field | Type | Description |
|---|---|---|
| timeout | word | Lines whose message contains it, any case. |
| "connection reset" | phrase | The exact words in that order. |
| -healthcheck | not | Leave out lines that contain it. |
Fields
| Field | Type | Description |
|---|---|---|
| level:error · level:>=warn | level | trace, debug, info, warn, error, fatal. With >=, > , <=, < for a range of levels. |
| service:api · service:api-* | text | The service (Railway service, Vercel project, Render service, or the service you send). * is a wildcard. |
| source:shop-api | text | A source by its name in Logyak. |
| host:app.example.com | text | The host. |
| kind:http | app · http · build · platform | What the line is: app output, an edge request, build output. |
| status:500 · status:>=400 · status:5xx | number | HTTP status, a comparison, or a class. |
| method:POST | text | HTTP method. |
| path:/api/orders · path:/api/* | text | HTTP path, exact or with a * wildcard. |
| duration:>1000 | number | Request duration in milliseconds. |
| request:r_8f2k1 | text | One request id, across every source. |
| attr.user_id:42 | text | An attribute of a JSON line equals a value. |
Put - in front of a field to leave those lines out: -service:cron. Quote values with spaces: service:"payment worker".
Searches worth saving
status:5xx -path:/healthEvery server error except health checks.level:>=warn service:apiWhat the API is unhappy about.kind:http duration:>2000Slow requests, over two seconds.kind:build level:errorFailed builds and deploys.
Save any search on the Logs page and it becomes a one-click chip for the whole workspace.