Get device logs

GET

/api/v1/devices/{id}/logs

const url = 'http://localhost:3000/api/v1/devices/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/logs?severity=DEBUG&limit=100&before=2026-03-17T12%3A00%3A00Z&source=my-container&q=connection%20refused';
const options = {method: 'GET', headers: {'X-API-Key': '<X-API-Key>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url 'http://localhost:3000/api/v1/devices/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/logs?severity=DEBUG&limit=100&before=2026-03-17T12%3A00%3A00Z&source=my-container&q=connection%20refused' \
  --header 'X-API-Key: <X-API-Key>'

Retrieves log entries for a device with cursor-based pagination, newest first.

Authorizations

api-key
bearer

Parameters

Path Parameters

required

string format: uuid

Device UUID

Query Parameters

severity

string

Allowed values: DEBUG INFO WARN ERROR

Filter by severity level

limit

number

default: 100 >= 1 <= 1000

Maximum number of log entries to return. Raised to 1000 (FM-772) to guarantee at least the last 1000 lines are retrievable for an active device.

before

string

Example

2026-03-17T12:00:00Z

Cursor for pagination (timestamp of last entry)

source

string

Example

my-container

Filter by log source (container name, service, or “system”)

string

Example

connection refused

Full-text search against the log message body. Matched case-insensitively as a substring, server-side, against Loki (index-backed by the label selector; the search itself is a line filter evaluated before JSON parsing). Composes with severity and source.

Responses

200

Log entries retrieved successfully

application/json

object

data

required

Array<object>

object

required

Log entry ID

string

deviceId

required

Device ID

string

timestamp

required

Timestamp

string

severity

required

Severity level

string

Allowed values: DEBUG INFO WARN ERROR

body

required

Log message body

string

source

Log source (container name, service, or system)

object

attributes

Structured attributes

object

hasMore

required

Whether there are more entries before the cursor

boolean

Example

{
  "data": [
    {
      "severity": "DEBUG"
    }
  ]
}

403

Forbidden — caller lacks required permission

404

Device not found