search_logs
Run Sumo Logic searches to diagnose production issues, find errors, and trace events with time range and filter support.
Instructions
Run a Sumo Logic search and return matching log lines. Use this to investigate production issues, find errors, trace events, or look up activity in logs. Returns trimmed messages with timestamp, source category, host, source name, and raw log line.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | Sumo Logic search expression (e.g. `_sourceCategory=prod/api error`). | |
| from | No | Start time. ISO 8601 (e.g. "2026-05-07T10:00:00") or Sumo relative ("-15m", "-1h", "-1d", "now"). Default "-15m". | |
| to | No | End time. Same format as `from`. Default "now". | |
| max_results | No | Max messages to return. Default 100, capped at 1000. | |
| timezone | No | IANA timezone name for the search (e.g. "UTC", "Europe/London"). Default "UTC". |