LogAce docs.
Use the guides for expression filters and query tabs, then keep the reference sections close for controls, profiles, input sources, and release links.
GUIDES expressions · queries
HOTKEYS keyboard map
APP macOS · CLI handoff
RELEASE v0.3.6
Guides for filter expressions and query tabs.
Use these pages for syntax, examples, available helpers, persistence behavior, and the difference between filtering the current view and creating a derived result tab.
Expression filters
Keep rows that match conditions plain search cannot express: parsed numbers, time windows, optional fields, nearby rows, and helper functions.
Open guide →
Query tabs
Turn the active view into grouped counts, one-row summaries, latency tables, projections, or live filtered result tabs.
Open guide →
Shortcut reference for the viewer.
LogAce can be driven with mouse clicks through the status bar and rows. This map is for the workflows that are faster from the keyboard.
Navigation
↑ / ↓Row navigation
PgUp / PgDnPage navigation
Ctrl+Home / EndFirst / last row
F5Go To — row · percent · timestamp
Ctrl+PgUp / PgDnPrevious / next bookmark
Open
F2Source picker
Ctrl+OOpen Docker container
Ctrl+KOpen Kubernetes pod
Ctrl+IOpen iOS simulator
Ctrl+RRecent log history
Tabs
F3 / F4Previous / next tab
Ctrl+TTab list — Space multi-select, Merge
Ctrl+DDuplicate panel
F6Close tab
Ctrl+Shift+RReload from source
View
F7Toggle wrap on wrap columns
F8Profile · F4 edit · F5 dup
F9Toggle local ↔ UTC
Ctrl+LColumn layout + virtual columns
Ctrl+ERe-open with encoding
Find
Ctrl+FFull-text search
Ctrl+GNext match
Ctrl+Shift+GPrevious match
F11Per-column filter dialog
+ / −Filter by current value / exclude
Expressions & Query
Ctrl+Shift+FExpression Filter dialog
Ctrl+QOpen Query Tab over current source
Ctrl+Shift+QEdit current query tab in place
Rows()Start a query from the active view
Mark & Save
SpaceToggle bookmark
Shift+SpaceName bookmark
F12Bookmark list
EnterRow detail dialog
Ctrl+SExport the current view
Highlight
hQuick highlight (temp)
Ctrl+HHighlight rules · P / D
Ctrl+YColor theme picker
Sessions
File → Save SessionPersist reopenable tabs as a named set
File → Open SessionAdditive reopen of a saved set
F10Activate menu bar
F1Help / About
EscQuit
The short version.
filter
Return bool for each row in the active view. Useful for typed comparisons, optional fields, time windows, regex helpers, and nearby-line checks.
query
Start from Rows() and return another table: grouped counts, summaries, projections, filtered tabs, or live results.
profile
Profiles turn raw log lines into columns, timestamps, highlights, virtual columns, and reusable parsing defaults.
input
Open logs from disk, archive entries, SSH, Docker, Kubernetes, syslog, stdin, or an iOS simulator.
controls
Use shortcuts for fast work, or click the bottom status bar and rows when pointer control is the better fit.
release
Direct builds for macOS, Linux, and Windows, with checksums for release verification.
More capabilities available in the current app.
These features extend the source, profile, command-line, state, and navigation workflows described above.
input
Local journalctl on Linux
Open one systemd unit or all services from F2, File → Open Journalctl Service, or Ctrl+J. Choose the initial tail, a --since range, and whether the tab should follow new records.
input
OpenTelemetry OTLP/HTTP listener
Start a live OpenTelemetry Logs source from the source picker or with --otel-logs. The listener defaults to 127.0.0.1:4318/v1/logs and exposes resource, scope, trace, span, attributes, severity, timestamp, and body fields.
profile
RAW, CSV, and TSV variants
The fixed catalog also includes RAW; CSV (Auto), CSV, CSV (Header Row); and the matching three TSV variants. Auto profiles conservatively detect a header, while the explicit variants keep or consume the first logical record as requested.
profile
More source-aware parsers
CloudWatch, Journalctl, Logcat, OTel Logs, and Syslog (RFC 3164 / RFC 5424) add typed timestamps and source-specific fields to the formats shown on the product page.
profile
Manage saved user profiles
Inside the F8 picker, F4 edits a saved [user] profile, F5 duplicates one or saves the current Ad Hoc definition under a name, and Delete removes a selected saved profile.
cli
Configure every source at startup
Source-specific option families cover Docker, SSH files and journalctl, iOS Simulator, macOS unified log, Android logcat, Kubernetes, AWS, Azure, GCP, OpenTelemetry, and syslog. Parser, expression-filter, Query Tab, time-zone, cache, debug, and pager options can be combined with them.
cli
App, tab, and stream handoff
logace app … opens a new LogAce.app window on macOS, logace tab file… sends existing files to a running instance, and logace stream [name] forwards redirected stdin into a named live tab.
settings
Grid and theme preferences
View → Settings controls horizontal row separators and padding around vertical column separators. Ctrl+Y chooses the global color theme; permanent highlight rules remain keyed by profile.
settings
Sidecar placement and GeoIP
Local-file state can live beside the log as <log>.las or under the LogAce state directory with a hashed name. Settings also accepts custom MaxMind City and ASN databases for GeoIP virtual columns.
state
Durable per-source state
Saved source state contains the selected profile and encoding, Ad Hoc definition, current physical anchor, bookmarks, expression-filter text and enabled state, plus per-profile column layouts and virtual columns.
state
Transient view state stays separate
Per-column filters, the current full-text search, and the active F7 wrap toggle survive reload or Duplicate while the tab is open, but they are not fields in the durable .las sidecar.
state
Global state and rebuildable cache
Preferences, recent history, expression and query history, Query Tab definitions, user profiles, sessions, and saved SSH connections live in the platform state directory. Source snapshots, live spools, merged timelines, and materialized query results use the separate cache directory.
grid
Visual-line and record navigation
Up/Down scroll one rendered line inside wrapped records; Ctrl+Up/Ctrl+Down select the previous or next logical record. Left/Right move one terminal column, while Ctrl+Left/Ctrl+Right jump between column starts.
grid
Horizontal and document edges
Home/End move to the horizontal beginning or end. Ctrl+Home/Ctrl+End jump to the first or last logical record; PageUp/PageDown retain page navigation.
view
Pager chrome without restarting
--pager starts the terminal viewer without menus, tabs, frames, headers, or status chrome. In terminal mode, Ctrl+P toggles that chrome for the current run.
query
Eligible Query Tab sources
Query Tabs can use reopenable local files and archives, SSH files or journals, macOS unified log, Android logcat, AWS, Azure, GCP, and OTel sources. They do not chain from another Query Tab or use transient Docker, Kubernetes, simulator, local journalctl, syslog, stdin, or merged spools as upstreams.
session
Reopenable source sets
Named sessions retain eligible source identities, their order, active tab, and expression-filter override. Opening a session is additive; Delete in the session picker removes the saved set without deleting its source logs.
Input sources
What each source opens, whether it follows or snapshots, and which external tools or credentials it uses.
Open reference →
Profiles and parsing
The complete parser catalog, Ad Hoc and saved profiles, plus fields derived through virtual columns.
Open reference →
Command-line workflows
Startup commands and the full option families for parsing, filters, queries, and integrated sources.
Open reference →
Settings and state
What persists, what remains transient, where LogAce stores it, and which source sets can be reopened.
Open reference →
Viewer controls
Precise visual-line and record navigation, workspace operations, analysis shortcuts, and pager mode.
Open reference →