New errors
new_errorsCompare error logs against a baseline to find new or spiking errors and services with rising error volume, including counts, first-seen times, and examples.
Instructions
Error logs compared with a baseline: errors that are new or spiking (messages that differ only by IDs count as one error), services whose error volume rose beyond their traffic, each with counts, first-seen time and one redacted example line, plus services whose errors are steady.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| since | No | Window start: RFC 3339 time or a duration ago such as 30m or 2h. Default 30m. | |
| until | No | Window end: RFC 3339 time or a duration ago. Default now. | |
| service | No | Service name. Omit to scan every service seen in the window. | |
| baseline | No | What to compare against: previous (the windows just before; default), 1d or 7d (same window that many days earlier). | |
| budget_tokens | No | Upper bound on the response size in tokens, 200 to 4000. Default 800. |