One ingest endpoint for everything
Send logs over HTTPS from any language, agent, or forwarder — structured JSON or raw text, both accepted without extra configuration.
Log Management
Search every log
Search every log
in milliseconds.
Ingest application, server and infrastructure logs through one endpoint — then full-text search, filter by any field, live-tail a stream, and alert on patterns without leaving the platform.
Free tier included
No credit card
2-minute setup
app-server · prod IngestingLIVE
EVENTS · 24H4.2M
INGEST RATE1,840/s
RETENTION90d
INFO3,914,220
WARN218,440
ERROR41,320
FATAL88ms
DEBUG26,940
What you get
One pipeline from every source.
A single HTTPS endpoint accepts logs from any language or framework. Structured fields are indexed immediately — so by the time you open the explorer a search that covers days of history returns in under a second.
Full-text and field search
Search the full message body or filter precisely on any structured field with =, !=, >, and CONTAINS operators in one query.
Live tail, zero refresh
Open a live stream in the explorer and new log lines appear in real time — no polling, no manual refresh, no context lost when you scroll.
Faceted filtering
Sidebar facets surface top values for every indexed field so you can narrow millions of events to the relevant handful in just a few clicks.
Alerts on log patterns
Define a search query and an event threshold — alerts route to Slack, webhooks, email, or your on-call schedule when matches exceed it.
Configurable retention
Set retention per log source — short windows for noisy debug logs, long windows for audit events — and pay only for what you keep.
01 · Search at scale
Millions of events,
Millions of events,
one fast query.
Every structured field is indexed at ingest time, so queries never scan raw text line-by-line. Full-text search across hundreds of millions of events completes in under a second — regardless of the time range you choose.
- Field-level indexing at ingest, not at query time
- Combine full-text search with structured field filters in one query
- Results ordered by time, newest first, with infinite scroll
payment-service · prod StreamingLIVE
MATCHED12,448
QUERY TIME38ms
TIME RANGElast 24h
checkout7,210
refund2,904
webhook1,538
timeout521ms
error275ms
02 · Query like a database
Logs you can actually
Logs you can actually
ask questions of.
The log query language feels like SQL. Aggregate event counts over time, group by any field, compute error rates, and pull results into dashboards or alert thresholds — all from the same query box.
- COUNT, GROUP BY, and time-bucket aggregations built in
- Save and pin queries as dashboard widgets
- Schedule queries and alert when results cross a threshold
log querySELECT level, COUNT(*) AS events
FROM logs
WHERE service = 'payment-service'
AND timestamp >= NOW() - INTERVAL '1 hour'
GROUP BY level
ORDER BY events DESC;
-- 5 rows · 41ms
FROM logs
WHERE service = 'payment-service'
AND timestamp >= NOW() - INTERVAL '1 hour'
GROUP BY level
ORDER BY events DESC;
-- 5 rows · 41ms
<1s
typical query time across millions of log events
90d
default retention, configurable per log source
0
agents required — send logs over plain HTTPS
$0
free tier — start without a credit card
FAQ
Questions, answered.
POST JSON or plain-text lines to your ingest HTTPS endpoint. Official libraries are available for Node.js, Python, Go, and Ruby. Any log forwarder — Fluent Bit, Vector, Logstash — works with the same endpoint.
Structured fields are indexed at ingest time, so most queries across hundreds of millions of events return in under a second. Full-text body search is slightly slower but still completes in single-digit seconds.
Yes — write any search query, set a count threshold and a time window, and an alert fires when matches exceed it. Route to Slack, a webhook, email, or your on-call schedule.
Retention is configurable per log source — from 3 days up to 1 year depending on your plan. Debug-level logs can have a shorter window than audit logs, keeping costs predictable.
Yes. The query language lets you mix a full-text expression with structured-field predicates in one query — for example, all ERROR-level events from a specific service that contain a particular customer ID.
More of the platform
Explore the rest of the platform
Ready?
Start watching in under a minute.
Every product starts free — uptime, cron, synthetic, logs, RUM, incidents, and status pages. No credit card required.