Skip to main content

VictoriaLogs queries

v0.1.5

Read-only LogsQL access to VictoriaLogs over its HTTP API: search log entries, hit histograms over time, stats aggregations (instant + range), and field / stream discovery. Express time ranges inside the LogsQL query via the _time filter. One base URL serves single-node and vmauth-fronted deployments; multitenancy via optional headers.

7 allowed by default
Pack ID
victorialogs
Vendor
emisar
OS
linux
Actions
7
Required binaries. Install these on the host before relying on the pack — an action that calls a missing one fails at run time.
curl

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below — the exact bytes this page was rendered against, so a tampered copy is rejected — before copying it into the runner's packs dir. The command reloads a running daemon itself; no manual restart.

on the runner host
sudo emisar pack install victorialogs --hash sha256:9b60b52da897db75b6f58f7174ea79165dea44da2b91566c1cedb0c4e540fc34

Actions 7 total

View on GitHub
  • vl.field_names script low

    GET /select/logsql/field_names

    List the log field names matching a query, each with a hit count. Use to discover what fields exist before querying. Doubles as the pack's connectivity check.

    View source on GitHub
  • vl.field_values script low

    GET /select/logsql/field_values

    List the most frequent values of one log field, each with a hit count. Use to enumerate levels, namespaces, hosts, or any other dimension.

    View source on GitHub
  • vl.hits script low

    GET /select/logsql/hits

    Count log entries matching a LogsQL query, bucketed over time by step — the histogram behind "how many errors per hour?". Bound the range with a _time filter in the query.

    View source on GitHub
  • vl.query script low

    GET /select/logsql/query

    Run a LogsQL query and return matching log entries as newline-delimited JSON. Bound the result with a _time filter in the query (e.g. "_time:5m error") and/or sort + limit — without a _time filter this scans all stored logs. The limit arg caps how many entries come back.

    View source on GitHub
  • vl.stats_query script low

    GET /select/logsql/stats_query

    Show instant stats over logs — a LogsQL query containing a "| stats" pipe, evaluated at one point in time and returned in Prometheus instant-query format. Use for totals like counts or sums grouped by a field.

    View source on GitHub
  • vl.stats_query_range script low

    GET /select/logsql/stats_query_range

    Show stats over logs across a time range — a LogsQL query containing a "| stats" pipe, evaluated at each step and returned in Prometheus range-query (matrix) format. Use to chart an aggregate over time. Bound the range with a _time filter in the query.

    View source on GitHub
  • vl.streams script low

    GET /select/logsql/streams

    List the log streams matching a query, each with a hit count. A stream is the set of logs sharing the same stream labels (app, host, container, …). Use to see which sources are sending logs.

    View source on GitHub