search_logs
Find and analyze log entries from Elasticsearch using time ranges, service, field, and free-text filters for troubleshooting.
Instructions
Search logs via Kibana with filters and time ranges. Supports service filtering by kubernetes.container.name, free-text queries, and field filters.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| to | No | End time, e.g., "now" | |
| from | No | Start time, e.g., "now-1h" or "2026-04-07T10:00:00Z" | |
| size | No | Max results (default 50) | |
| sort | No | Sort order on time field | desc |
| index | No | Index pattern, e.g., "logs-*", "filebeat-*", or "production-my-service*" | * |
| query | No | Free text query string (Lucene syntax). Searches the message field. | |
| filters | No | Key-value field filters, e.g., {"level": "error"}. For JSON log level inside message, use messageLevel instead. | |
| service | No | Filter by kubernetes.container.name, e.g., "my-service" | |
| timeField | No | Timestamp field name | @timestamp |
| messageLevel | No | Filter by log level inside JSON message field, e.g., "error", "warn", "info" | |
| messageQuery | No | Search text within the message field (match_phrase), e.g., "Too Many Requests" or "Error syncing" | |
| excludeHealthChecks | No | Exclude health/liveness/readiness check logs |