log_analyzer
Analyze a log file. POST raw log text (or an upload_id from the uploads tool, up to 5MB) and get: level breakdown + time range, error clusters (messages normalized so variable ids/numbers collapse into one signature, with counts + first/last seen + a sample), a timeline, detected anomalies (error spikes, retry storms, new error signatures, log gaps/outages, level-ratio shifts) with evidence, and templated recommendations. Handles JSON-lines and plain formats (ISO8601/syslog/CLF/epoch timestamps). Deterministic, single-pass, no LLM.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| text | No | Raw log content (up to 1M chars). | |
| top_n | No | Top clusters to return (1-50, default 10). | |
| format | No | ||
| upload_id | No | Alternative: a log file uploaded via the uploads tool. |