Skip to content

Log Search & AI Query

Log Browser — search, filter, and live tail

Location in Keel: /logs

The Log Browser (under the Logs menu) lets you search, filter, and tail logs live, run read-only SQL, or ask in plain English.

Filtering logs

Use the filter bar at the top of the Log Browser:

  1. Service — narrow to one or more services (ServiceName).
  2. Severity — filter by level (e.g. ERROR, WARN, INFO).
  3. Time range — pick a quick range (last 15m / 1h / 24h …) or an absolute from/to.
  4. Search text — free-text match against the log body.

Apply the filters to update the results and the volume histogram; use live tail to stream new matching logs as they arrive.

Tip

Fields you extract with a Parse block (see Log Pipeline & Processing) — e.g. parsed.level, parsed.status — are searchable here too, so a good parser makes filtering much more precise.

Query mode (SQL)

Switch to query mode to run a direct read-only SELECT against the log store. Writes and unsafe statements are blocked. Useful columns include Timestamp, ServiceName, SeverityText, Body, LogAttributes, and ResourceAttributes.

AI Query

Type a question in plain English (e.g. "show me errors from checkout in the last hour") and Keel translates it into a query and runs it. AI Query requires a configured, reachable LLM (Settings → AI Configuration).