docker_log_summary
Summarizes a container's logs by parsing access-log style entries for status-code mix, 4xx/5xx error rates, and top request paths, or grouping error patterns. Operates client-side with read-only access.
Instructions
Aggregate one container's log stream: web-style parsing (status-code mix, 4xx/5xx error rates, top request paths) when the stream looks like access logs (plain or JSON), error-pattern grouping otherwise. Aggregation happens client-side — raw container logs never leave the box's operator. Read-only. Returns JSON: {kind, status_mix, error_rate_4xx, error_rate_5xx, top_paths: [{path, requests}], error_patterns: [{pattern, count, sample}], lines_scanned}. Errors: docker_not_available, docker_permission_denied, container_not_found, no_logs_available.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| top_n | No | Max rows per section (1-100, default 20). | |
| container | Yes | Container name or ID. | |
| instance_id | Yes | Instance ID or name. | |
| since_minutes | No | Lookback window in minutes (1-10080, default 1440). |