Logship Documentation
Open Logship

Query Reference

Logship uses a Kusto-style query language to filter events, transform columns, combine tables, and summarize data for analysis and charts. Start with Basics for a first query, then use Query as an index of the language reference. The Language section provides operator syntax, scalar and aggregate functions, data types, and table management commands.

Sections

Language

Build queries as pipelines: start from a table or generated data, filter and shape rows, then aggregate, join, or render the results. Use Tabular Operators for pipeline stages, Functions for expressions and calculations, and Types and Expressions for the underlying syntax. Management Commands describe operations that inspect or change table definitions.

Pages

Basics

Write your first query and learn how to filter, summarize, and combine results.

Multiple query results

Query

Browse the full index of query operators, functions, and table management commands.