Query Logs
logsFind logs matching filter criteria within a time range.
Use this as your default starting point for log queries. Returns logs sorted by (timestamp, logId) descending (newest first). When investigating an error or a failure, call list_issues first: Fixter has often grouped it already into an issue with its count, first and last seen and a traceId to search from.
Returns the log's main fields by default; pass verbose=true to include its
attributes (http/url/… flattened in, plus a resource object). Long string values
are capped (maxStringChars). For raw columns or custom selection use run_sql. For
one row with every attribute, use get_log; a cut value's marker carries the "more"
call that reads the rest.
Defaults: from: 1 hour before to (or before now) when omitted; set it to read further back to: now when omitted limit: 100 (max 1000) service/level: any
Common patterns:
Errors in the last hour: level="ERROR", from=<1h ago>
Logs for a trace: traceId="abc123..."
Whole-token search (case-insensitive): messageContains="timeout"
Substring or regex search: not supported here; use run_sql
Returns: logs: array of log objects (lean unless verbose=true) nextCursor: opaque token (null on the last page); pass back as cursor to fetch the next page truncationHint: present when the page was cut to fit the response; nextCursor then reads on from the last log shown explorerUrl: shareable Fixter UI link opening this query in the log explorer — when the user asks to see or browse these logs, send them there rather than reproducing the listing; attach it when citing these logs as evidence (covers the service/level/traceId filters and the window; timestamps display in the viewer's browser timezone) queryStats: rowsReturned, elapsedMs
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| to | No | End of time window, ISO-8601 instant (exclusive); now when omitted | |
| from | No | Start of time window, ISO-8601 instant (inclusive); 1 hour before to (or now) when omitted | |
| level | No | Filter by log level: TRACE, DEBUG, INFO, WARN, ERROR | |
| limit | No | Max logs to return, default 100, max 1000 | |
| cursor | No | Opaque cursor from a previous response's next_cursor | |
| service | No | Filter by service name (e.g. 'investigation-service') | |
| traceId | No | Filter to a single trace id | |
| verbose | No | Include the row's attributes (flattened in, plus a `resource` object). Long string values are still capped (maxStringChars) either way. Default false. | |
| maxStringChars | No | Max characters of any string value (message or attribute) before truncation, at most 4000. Omit to use the server default. | |
| messageContains | No | Whole-token match on the message, case-insensitive. 'time' does not match 'timeout'. A term containing separators requires each of its tokens to be present. For substring or regex matching use run_sql |