sazabi logs

sazabi logs <subcommand>

sazabi logs tail  # Tail all logs in real time
sazabi logs tail --severities ERROR,WARN  # Tail only errors and warnings
sazabi logs query "timeout"  # Search stored logs
sazabi logs forward --file app.log  # Forward from file

sazabi logs schema [options]

sazabi logs schema --json  # Backend, fields, and recent key hints
sazabi logs schema --question "5xx errors by route"  # Question-conditioned schema bundles
sazabi logs schema --question "intake batch failures" --json  # Machine-readable schema bundles

sazabi logs tail [options]

sazabi logs tail  # Tail all logs in real time
sazabi logs tail --severities ERROR,WARN  # Tail only errors and warnings
sazabi logs tail --services api,worker  # Tail specific services
sazabi logs tail --environments production,staging  # Tail specific environments
sazabi logs tail --search "database"  # Tail logs matching search term
sazabi logs tail --attribute user.id=42  # Tail logs with an exact attribute value
sazabi logs tail --attrs model,prompt  # Show selected attributes per line
sazabi logs tail --attrs all  # Show every attribute per line
sazabi logs tail --json  # Output as JSON

sazabi logs search <question> [options]

sazabi logs search "p95 API latency by route"  # Aggregate route latency through indexed log families
sazabi logs search "error count by service over the last hour" --json  # Return a persisted query spec and typed results
sazabi logs search "show recent database timeout examples"  # Hydrate bounded matching raw-log examples

sazabi logs query [search-text] [options]

sazabi logs query "connection refused" --last 1h --service api --severity ERROR  # Search recent API errors
sazabi logs query --trace-id abc123 --select timestamp,service,severity,body  # Find logs for one trace
sazabi logs query --filter http_status_code.gte=500 --limit 100 --json  # Machine-readable structured filter
sazabi logs query --attribute user.id=42 --last 1h --json  # Filter by an exact attribute value
sazabi logs query "beach house" --search-field attributes --last 1h  # Full-text search inside attribute values
sazabi logs query --query-all --select timestamp,body,attributes --json  # Return the full attributes map
sazabi logs query error --mode any --limit 100  # Match any token with a larger page
sazabi logs query --query-all --limit 20 --sort-field @timestamp  # Recent rows without full-text search
sazabi logs query slow --json  # Machine-readable output

sazabi logs patterns [pattern-text] [options]

sazabi logs patterns "connection refused" --severity ERROR --limit 25  # Find recurring error patterns
sazabi logs patterns --last 24h --json  # Export recent patterns

sazabi logs volume [options]

sazabi logs volume --last 6h --group-by service  # Compare service log volume
sazabi logs volume --last 24h --severity ERROR --interval 15m --json  # Export error volume

sazabi logs native-query [options]

sazabi logs native-query --query "SELECT service_name, count() FROM log_volume_per_minute GROUP BY service_name LIMIT 20"  # Run backend-native query text
sazabi logs native-query --file investigation.sql --json  # Run a query from a file

sazabi logs forward [options]

echo "Log message" | sazabi logs forward  # Forward from stdin
sazabi logs forward --file app.log  # Forward from file
sazabi logs forward --file app.log --follow  # Forward file with tail -f behavior
sazabi logs forward --file app.log --batch-size 50  # Forward with custom batch size