search_logs

search_logs

Search SolarWinds Observability logs with optional filtering

Input Schema

Name	Required	Description	Default
`direction`	No	Sort order: backward (oldest to newest), forward (newest to oldest), or tail (oldest to newest)	backward
`endTime`	No	UTC end time (ISO 8601 format)
`entityId`	No	Filter logs by a specific entity ID
`filter`	No	A search query string. Use AND/OR operators to combine terms (e.g., "error AND timeout"). The search is performed across all fields including message, hostname, program, and nested JSON fields like Context.CorrelationId. Field-specific queries like "field:value" are not supported.
`group`	No	Filter logs by a specific group name
`pageSize`	No	Maximum messages to return per page
`skipToken`	No	Token to skip to the next page of results
`startTime`	No	UTC start time (ISO 8601 format)

Input Schema (JSON Schema)

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "additionalProperties": false,
  "properties": {
    "direction": {
      "default": "backward",
      "description": "Sort order: backward (oldest to newest), forward (newest to oldest), or tail (oldest to newest)",
      "enum": [
        "backward",
        "forward",
        "tail"
      ],
      "type": "string"
    },
    "endTime": {
      "description": "UTC end time (ISO 8601 format)",
      "type": "string"
    },
    "entityId": {
      "description": "Filter logs by a specific entity ID",
      "type": "string"
    },
    "filter": {
      "description": "A search query string. Use AND/OR operators to combine terms (e.g., \"error AND timeout\"). The search is performed across all fields including message, hostname, program, and nested JSON fields like Context.CorrelationId. Field-specific queries like \"field:value\" are not supported.",
      "type": "string"
    },
    "group": {
      "description": "Filter logs by a specific group name",
      "type": "string"
    },
    "pageSize": {
      "default": 50,
      "description": "Maximum messages to return per page",
      "type": "number"
    },
    "skipToken": {
      "description": "Token to skip to the next page of results",
      "type": "string"
    },
    "startTime": {
      "description": "UTC start time (ISO 8601 format)",
      "type": "string"
    }
  },
  "type": "object"
}

Input Schema

Input Schema (JSON Schema)

Other Tools