Skip to main content
Glama

search_logs

Read-only

Query Dynatrace log records by time range, filters, sort order, and pagination to troubleshoot errors and inspect events.

Instructions

Search log records (GET /api/v2/logs/search). Needs scope logs.read.

Input Schema

NameRequiredDescriptionDefault
sortNotimestamp or -timestamp-timestamp
limitNo
queryNoLog query, e.g. status="ERROR" AND content="timeout". Empty = all
to_timeNoEnd: now, ISO-8601 or epoch msnow
from_timeNoStart: now-2h, ISO-8601 (2026-10-31T10:00:00Z) or epoch msnow-2h
next_slice_keyNonextSliceKey from the previous result

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.0

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=true, and the description usefully adds the required OAuth scope. Beyond that it discloses nothing extra: no mention of the default 2-hour window, pagination via next_slice_key, result caps, or rate limits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences, both carrying information, with the operation stated first. Nothing is padded, though the brevity leaves gaps that could have been filled without bloat.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With six optional parameters, no output schema, and a pagination token whose reuse semantics matter, the description should say more about paging, default time behavior, and how results relate to sibling tools. The scope hint is the only context offered.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 83%, so the schema itself already documents sort, query, time bounds, and next_slice_key with examples. The description adds no parameter meaning whatsoever, which is acceptable but no better than baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ("Search log records") and even names the backing endpoint, so the agent knows exactly what operation this is. It does not, however, distinguish itself from siblings like aggregate_logs or get_trace_logs, which also read logs and could be confused with a plain search.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

"Needs scope logs.read" is an auth prerequisite rather than usage guidance. There is no statement about when to prefer this over aggregate_logs, get_trace_logs, or investigate_problem, and no exclusions or querying-context advice.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.