docker_log_summary
Summarize container logs: parse access logs for status mix, 4xx/5xx errors, top paths, or group error patterns for other logs. Returns a JSON summary without leaving the box.
Instructions
Aggregate one container's log stream: web-style parsing (status-code mix, 4xx/5xx error rates, top request paths) when the stream looks like access logs (plain or JSON), error-pattern grouping otherwise. Aggregation happens client-side — raw container logs never leave the box's operator. Read-only. Returns JSON: {kind, status_mix, error_rate_4xx, error_rate_5xx, top_paths: [{path, requests}], error_patterns: [{pattern, count, sample}], lines_scanned}. Errors: docker_not_available, docker_permission_denied, container_not_found, no_logs_available.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| top_n | No | Max rows per section (1-100, default 20). | |
| container | Yes | Container name or ID. | |
| instance_id | Yes | Instance ID or name. | |
| since_minutes | No | Lookback window in minutes (1-10080, default 1440). |