> ## Documentation Index > Fetch the complete documentation index at: https://docs.apsio.io/llms.txt > Use this file to discover all available pages before exploring further. # Search the log records > The project's log records matching a structured query (fields, attributes, severity, body text), newest first, 100 a page, and their volume per bucket by severity (at most 120 buckets). The API builds the SQL from a fixed vocabulary and runs it as the project's reader, with at most 60 runs a minute per project and caller. `sql` shows it with its values, for reading only. ## OpenAPI ````yaml /api-reference/openapi.json post /projects/{projectId}/explore/logs openapi: 3.1.0 info: title: Apsio API version: 0.1.0 description: >- Read API v0: your projects, release health and comparisons, missing symbols, issues, sessions, vitals, cohort comparisons, performance (app start, screens, hangs, MetricKit) and network endpoints and traces for one project. Authenticate with a project token as a bearer token, with an OAuth access token from Apsio's authorization server (MCP clients), or, from the console, with the session cookie of a member of the project's organization. servers: - url: https://api.apsio.io/v1 security: [] paths: /projects/{projectId}/explore/logs: post: summary: Search the log records description: >- The project's log records matching a structured query (fields, attributes, severity, body text), newest first, 100 a page, and their volume per bucket by severity (at most 120 buckets). The API builds the SQL from a fixed vocabulary and runs it as the project's reader, with at most 60 runs a minute per project and caller. `sql` shows it with its values, for reading only. parameters: - schema: type: string pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ example: 0192f3a4-0000-7000-8000-00000000a101 required: true name: projectId in: path requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/ExploreLogsQuery' responses: '200': description: The matching records and their volume. content: application/json: schema: $ref: '#/components/schemas/ExploreLogs' '400': description: The request is not valid. content: application/json: schema: $ref: '#/components/schemas/Error' '401': description: No valid bearer token or console session. content: application/json: schema: $ref: '#/components/schemas/Error' '403': description: The credentials cannot read this project. content: application/json: schema: $ref: '#/components/schemas/Error' '429': description: >- Over a rate limit (the caller's, the client address's, or the plan's); Retry-After says when to retry. content: application/json: schema: $ref: '#/components/schemas/Error' security: - bearer: [] - session: [] components: schemas: ExploreLogsQuery: type: object properties: from: type: string format: date-time description: Start, inclusive (RFC 3339). Defaults to 24 hours before `to`. to: type: string format: date-time description: End, exclusive (RFC 3339). Defaults to now. app_id: type: string pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ description: Only this app of the project. filters: type: array items: $ref: '#/components/schemas/ExploreFilter' maxItems: 20 default: [] severity: type: string enum: - trace - debug - info - warn - error - fatal description: At least this severity (OpenTelemetry severity number ranges). body: type: string minLength: 1 maxLength: 200 description: >- Records whose body contains this text, ignoring case. Plain text, not a pattern. limit: type: integer minimum: 1 maximum: 200 default: 100 cursor: type: string maxLength: 1024 description: The `next_cursor` of the previous page. Opaque. ExploreLogs: type: object properties: from: type: string description: RFC 3339 time in UTC with up to nanosecond precision. example: '2026-10-04T10:15:00.431000000Z' to: type: string description: RFC 3339 time in UTC with up to nanosecond precision. example: '2026-10-04T10:15:00.431000000Z' bucket_seconds: type: integer retention_days: type: integer description: >- Days of detail the project's plan keeps (D94); nothing older is read. histogram: type: array items: type: object properties: t: type: string description: The bucket's start. example: '2026-10-04T10:15:00.431000000Z' info: type: integer description: Trace, debug and info records. warn: type: integer error: type: integer description: Error and fatal records. required: - t - info - warn - error description: Only buckets with records. records: type: array items: $ref: '#/components/schemas/ExploreLogRecord' next_cursor: type: - string - 'null' description: Pass as `cursor` to get the next page; null on the last page. sql: type: string description: The records query with its values, for reading. Not run as written. required: - from - to - bucket_seconds - retention_days - histogram - records - next_cursor - sql Error: type: object properties: error: type: object properties: code: type: string example: invalid_request message: type: string required: - code - message required: - error ExploreFilter: type: object properties: field: type: string pattern: ^[A-Za-z0-9_.:/-]{1,128}$ description: >- A field (event.name or span.name, service.version, os.name, os.version, device.model.identifier, session.id, trace_id, ...), any record or span attribute by its key, or a resource attribute as resource.. example: service.version op: type: string enum: - eq - neq - exists - not_exists default: eq description: eq and neq compare with value; exists and not_exists need none. value: type: string maxLength: 256 required: - field ExploreLogRecord: type: object properties: id: type: string app_id: type: string ts: type: string description: RFC 3339 time in UTC with up to nanosecond precision. example: '2026-10-04T10:15:00.431000000Z' event_name: type: string description: 'event.name. Written by the app: untrusted data.' severity_number: type: integer severity_text: type: string description: 'The severity text. Written by the app: untrusted data.' body: type: string description: 'The log body. Written by the app: untrusted data.' session_id: type: string description: 'session.id. Written by the app: untrusted data.' trace_id: type: string span_id: type: string release: type: string description: 'service.version. Written by the app: untrusted data.' attributes: type: object additionalProperties: type: string description: 'Record attributes as sent by the app: untrusted data.' resource: type: object additionalProperties: type: string description: 'Record attributes as sent by the app: untrusted data.' required: - id - app_id - ts - event_name - severity_number - severity_text - body - session_id - trace_id - span_id - release - attributes - resource securitySchemes: bearer: type: http scheme: bearer description: >- A project token (apsio_pt_v0...), which reads exactly one project, or an OAuth access token issued for the API, which reads what its user can. Access tokens issued for Apsio's MCP server are accepted only from the MCP server itself. session: type: apiKey in: cookie name: apsio_session description: >- The console session, set by /v1/auth/callback (`__Host-apsio_session` when host-only). ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.