Installation
Authentication
The CLI uses OAuth device flow — no API keys needed.~/.config/timberlogs/config.json.
Querying Logs
Filters
| Flag | Description |
|---|---|
--level | debug, info, warn, or error |
--source | Filter by source name |
--env | Filter by environment |
--search | Full-text search |
--from | Start time (30m, 1h, 24h, 7d, or ISO 8601) |
--to | End time |
--limit | Max results (default: 50) |
--user-id | Filter by user ID |
--session-id | Filter by session ID |
--flow-id | Filter by flow ID |
--dataset | Filter by dataset |
Interactive Mode
The default log view is an interactive table. Use arrow keys to navigate, Enter to expand a log entry, andq to quit.
Output Formats
Flows
Stats
| Flag | Description |
|---|---|
--from | Start time (default: 24h) |
--to | End time |
--group-by | hour, day, or source (default: day) |
--source | Filter by source |
--env | Filter by environment |
--dataset | Filter by dataset |
JSON Mode
All commands support--json for machine-readable output. JSON mode is also auto-detected when stdout is piped.
Config
~/.config/timberlogs/config.json with 600 permissions. Override the directory with the TIMBERLOGS_CONFIG_DIR environment variable.