fetch_graylog_messages
Retrieve log messages from Graylog using search queries, time ranges, and field filters. Select a connection first, then fetch messages to analyze and troubleshoot logs.
Instructions
Fetch messages from the active Graylog connection. Use 'use_connection' first to select a connection.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| to | No | End time for absolute range (ISO string or timestamp) | |
| from | No | Start time for absolute range (ISO string or timestamp) | |
| page | No | Page number (starts at 1). Default: 1 | |
| query | No | The query to search for, with the respective fields and values | |
| fields | No | Comma-separated field names to return, or '*' for all fields. Default: returns key fields only (timestamp, gl2_message_id, source, env, level, message, logger_name, thread_name, PODNAME) | |
| filters | No | Field filters (e.g. {"env": "marketplace_loki", "level": 7, "source": "prefr-management"}) | |
| pageSize | No | Number of messages per page. Default: 50 | |
| streamIds | No | Optional stream IDs to scope the search. Use 'list_streams' to get available stream IDs. | |
| timeRange | No | Time range (e.g., '1h', '2d', '30m') or use from/to for absolute range | |
| exactMatch | No | If true (default), wraps the query in quotes for exact match. Set to false for fuzzy/wildcard search. | |
| searchTimeRangeInSeconds | No | [DEPRECATED] Use timeRange instead. Time range in seconds |