Log Search
Log Search lets you search the logs Guardian has collected from your agents. Logs are retained for 30 days.
Searching
Section titled “Searching”Type a query into the search box to match log messages — for example, failed password, error, or nginx. Matches are highlighted in the results. Any change to the search box or filters triggers a new search automatically after a short pause, or you can click Search directly.
Filters
Section titled “Filters”- Device — search all devices or narrow to one
- Level — Error, Warning, Info, or Debug
- Source — the service or log source that produced the entry (populated from recent logs for the selected device)
- Time range — last 1 hour, 6 hours, 24 hours, 7 days, or 30 days
- Limit — 100, 200, 500, or 1000 lines
Results
Section titled “Results”Each result row shows the timestamp, level, hostname, source, and message. Hovering a row reveals a copy button that copies the full formatted line to your clipboard. Above the results, a summary line shows the total result count plus error and warning counts. If results are capped at your selected limit, a note tells you to narrow the search to see more.
If nothing matches, Guardian suggests widening the time range or checking filters — note that new log lines can take up to a minute to appear after being generated, since agents ship logs on a 30-second interval.
Related
Section titled “Related”To watch new events arrive live instead of searching history, see Live Stream. Logs are scoped to devices managed in Agents.