docker_log_summary
Summarize a container's log stream by parsing web-style access logs for status codes, error rates, and top request paths, or by grouping error patterns, returning JSON statistics without sending logs off the host.
Instructions
Aggregate one container's log stream: web-style parsing (status-code mix, 4xx/5xx error rates, top request paths) when the stream looks like access logs (plain or JSON), error-pattern grouping otherwise. Aggregation happens client-side — raw container logs never leave the box's operator. Read-only. Returns JSON: {kind, status_mix, error_rate_4xx, error_rate_5xx, top_paths: [{path, requests}], error_patterns: [{pattern, count, sample}], lines_scanned}. Errors: docker_not_available, docker_permission_denied, container_not_found, no_logs_available.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| top_n | No | Max rows per section (1-100, default 20). | |
| container | Yes | Container name or ID. | |
| instance_id | Yes | Instance ID or name. | |
| since_minutes | No | Lookback window in minutes (1-10080, default 1440). |