search_history
Search persistent journal history to retrieve log events older than the live in-memory buffer, including hours or days back. Find what happened at 3am or any past time when tail_logs and search_logs fall short.
Instructions
Search the on-disk journal: hours or days of history, not the few minutes the hub keeps in memory. This is the tool for "what happened at 3am" or anything older than the live ring - tail_logs and search_logs cannot see that far back. Needs superlog-journal to have been running at the time.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| dir | No | Journal directory (default ./superlog-journal, or $SUPER_LOG_JOURNAL) | |
| level | No | Minimum level | |
| limit | No | Max events (default 50, cap 200); the NEWEST matches | |
| since | No | Start of the window: 30m, 2h, 3d, 03:00 (today, UTC), 2026-08-22, or a full ISO timestamp. Windows on hub arrival time, which is the only reliable clock across streams | |
| topic | No | Exact topic (cpp.clock), a prefix ending in a dot (expo. matches every device stream), or * | |
| trace | No | One correlation id, across every stream | |
| until | No | End of the window, same forms as since | |
| contains | No | Case-insensitive substring of the whole event, fields included |