datadog_logs_search
Search Datadog log events using a query filter over a time range (default 15 min). Returns YAML output with pagination up to 10,000 results.
Instructions
Search Datadog log events with a logs query (e.g. service:api status:error) over a time range (default last 15m). For the event/alert stream rather than logs, use datadog_events_list. limit of 0 (or omitted) auto-paginates across cursor pages up to 10000; any non-zero value caps the total at that count (default 100). sort is timestamp-asc or timestamp-desc (default). Read-only. Mirrors omni-dev datadog logs search. Output is YAML.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| to | No | End of the time range. Defaults to `now` when omitted. | |
| from | No | Start of the time range. Accepts relative shorthand (`15m`, `1h`), `now`, RFC 3339, or Unix epoch seconds. Defaults to `15m` when omitted. | |
| sort | No | Sort order: `"timestamp-asc"` (oldest first) or `"timestamp-desc"` (newest first; default). | |
| limit | No | Maximum events to return. `0` means "fetch every match across pages (capped at 10000)"; any non-zero value caps the total at that count, paginating underneath as needed. Defaults to 100. | |
| filter | Yes | Datadog logs query, e.g. `service:api status:error`. Required; use `*` to match all logs. |