logstreem tail

Follow a live stream, filtered, in your terminal.

$logstreem tail

Streams matching events as they are written. Ctrl-C to stop.

Usage

logstreem tail <dataset> [--where <expr>] [--follow]

Flag	Type	Description
<dataset>	string	Dataset to tail. Required.
--where <expr>	string	An LSQL `where` expression, without the keyword.
--fields <list>	string	Comma-separated fields to show. Default: time, level, service, message.
-f, --follow	boolean	Keep streaming. Default true; `--no-follow` prints the backlog and exits.
--since <duration>	string	Start from this far back before following.
--json	boolean	One JSON object per line, for piping.

$ logstreem tail api-gateway-prod --where 'status >= 500'
✓ streaming api-gateway-prod · filter: status >= 500 · 112ms lag

09:41:02.114  error  checkout   503  /v1/checkout   pool exhausted: 40/40 connections
09:41:03.882  error  payments   500  /v1/charge     upstream timeout after 30s
09:41:08.401  error  checkout   503  /v1/checkout   pool exhausted: 40/40 connections
^C
3 events in 8s

No aggregation in a tail

--where only. There is no end of input to summarize over — see live tail. For a rolling count, poll logstreem query on a timer instead.

Previouslogstreem query Nextlogstreem datasets