list_fields
List actual message fields in the index to avoid guessing field names that may not exist. Use the contains filter to narrow down fields before running searches.
Instructions
List the message fields that actually exist in the index. Use this BEFORE searching on a field you have not seen in a result, so you never guess a field name — a query on a nonexistent field returns 0 matches, which is indistinguishable from 'no logs'. Clusters index thousands of fields, so pass contains to narrow (e.g. "namespace").
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max field names to return. Default: 100. | |
| contains | No | Case-insensitive substring filter on the field name, e.g. "namespace", "pod", "level". | |
| instance | No | Graylog instance to query. Active: "instance_1". Default: "instance_1". |