SaneLog
Documentation
Guides and reference for every part of SaneLog: sending logs from servers and cloud services, searching and following them in the Log Explorer, saving filters, setting up alerts and managing the account.
New to SaneLog? Start with Your first logs, which covers the steps for a new account from switching on syslog to live events in the Log Explorer.
Syslog and sender approval, the HTTP ingest endpoint, and config sets.
The sources list and a source's page, descriptions, environments, source tokens, arrival lag, merging and deleting.
Forwarding CloudWatch Logs and EventBridge service events, step by step in the AWS console or the AWS CLI, with the forwarder code.
Searching and narrowing events, moving through the stream, reading an event, display settings, Explain line and Copy for agent.
Event conditions written as text for advanced search, filter conditions and the API, with worked examples.
Saved views of events: which sources a filter covers and the conditions a filter applies.
Alert types, the channels notifications are sent to (with the webhook payload), and how alerts fire.
Lines grouped into message patterns and clusters, compared with the window before, and zooming in from a count to the lines behind it.
Downloading stored log lines as a zip: choosing the lines and days, how the files are laid out, the line format and how long an export is kept.
Email reports on a period that has ended, compared with the period before, and how each person chooses which reports to receive.
Connecting a coding agent to the MCP server, the setup for each client, what a connected agent can do, and managing the agents connected to the account.
What Copy for agent hands a coding agent: the event or incident and the window around it, how an alert email names its incident for an agent, and how an agent reads a handoff.
The read API for scripts, pipelines and headless agents: getting a token, the conventions, every endpoint with its parameters, example responses, the limits and the investigation method.
Your profile, password, two-factor authentication, passkeys, sessions, devices and connected agents.
Access options, managing users, account settings, API tokens and the audit log.
Finding personal data and credentials in log lines as they arrive, counting them, and replacing them before the lines are stored.
What a plan sets (sources, ingest allowance and retention), paying for a plan, invoices and the payment method.