Home / Docs

LogAce docs.

Use the guides for expression filters and query tabs, then keep the reference sections close for controls, profiles, input sources, and release links.

GUIDES expressions · queries
HOTKEYS keyboard map
APP macOS · CLI handoff
RELEASE v0.2.0
§ DOCS·1 Guides deeper pages

Guides for filter expressions and query tabs.

Use these pages for syntax, examples, available helpers, persistence behavior, and the difference between filtering the current view and creating a derived result tab.

§ DOCS·2 Hotkeys keyboard map

Shortcut reference for the viewer.

LogAce can be driven with mouse clicks through the status bar and rows. This map is for the workflows that are faster from the keyboard.

▸ Navigation

↑ / ↓Row navigation
PgUp / PgDnPage navigation
Ctrl+Home / EndFirst / last row
F5Go To — row · percent · timestamp
Ctrl+PgUp / PgDnPrevious / next bookmark

▸ Open

F2Source picker
Ctrl+OOpen Docker container
Ctrl+KOpen Kubernetes pod
Ctrl+IOpen iOS simulator
Ctrl+RRecent log history

▸ Tabs

F3 / F4Previous / next tab
Ctrl+TTab list — Space multi-select, Merge
Ctrl+DDuplicate panel
F6Close tab
Ctrl+Shift+RReload from source

▸ View

F7Toggle wrap on wrap columns
F8Profile · F4 edit · F5 dup
F9Toggle local ↔ UTC
Ctrl+LColumn layout + virtual columns
Ctrl+ERe-open with encoding

▸ Find

Ctrl+FFull-text search
Ctrl+GNext match
Ctrl+Shift+GPrevious match
F11Per-column filter dialog
+ / −Quick include / exclude

▸ Expressions & Query

Ctrl+Shift+FExpression Filter dialog
Ctrl+QOpen Query Tab over current source
Ctrl+Shift+QEdit current query tab in place
Rows()Start a query from the active view

▸ Mark & Save

SpaceToggle bookmark
Shift+SpaceName bookmark
F12Bookmark list
EnterRow detail dialog
Ctrl+SExport the current view

▸ Highlight

hQuick highlight (temp)
Ctrl+HHighlight rules · P / D
Ctrl+YColor theme picker

▸ Sessions

File → Save SessionPersist reopenable tabs as a named set
File → Open SessionAdditive reopen of a saved set
F10Activate menu bar
F1Help / About
EscQuit
§ DOCS·3 Reference Links shortcuts to concepts

The short version.

filter
Return bool for each row in the active view. Useful for typed comparisons, optional fields, time windows, regex helpers, and nearby-line checks.
query
Start from Rows() and return another table: grouped counts, summaries, projections, filtered tabs, or live results.
profile
Profiles turn raw log lines into columns, timestamps, highlights, virtual columns, and reusable parsing defaults.
input
Open logs from disk, archive entries, SSH, Docker, Kubernetes, syslog, stdin, or an iOS simulator.
controls
Use shortcuts for fast work, or click the bottom status bar and rows when pointer control is the better fit.
release
Direct builds for macOS, Linux, and Windows, with checksums for release verification.
§ DOCS·4 Extended Reference more of the application surface

More capabilities available in the current app.

These features extend the source, profile, command-line, state, and navigation workflows described above.

input
Local journalctl on Linux
Open one systemd unit or all services from F2, File → Open Journalctl Service, or Ctrl+J. Choose the initial tail, a --since range, and whether the tab should follow new records.
input
OpenTelemetry OTLP/HTTP listener
Start a live OpenTelemetry Logs source from the source picker or with --otel-logs. The listener defaults to 127.0.0.1:4318/v1/logs and exposes resource, scope, trace, span, attributes, severity, timestamp, and body fields.
profile
RAW, CSV, and TSV variants
The fixed catalog also includes RAW; CSV (Auto), CSV, CSV (Header Row); and the matching three TSV variants. Auto profiles conservatively detect a header, while the explicit variants keep or consume the first logical record as requested.
profile
More source-aware parsers
CloudWatch, Journalctl, Logcat, OTel Logs, and Syslog (RFC 3164 / RFC 5424) add typed timestamps and source-specific fields to the formats shown on the product page.
profile
Manage saved user profiles
Inside the F8 picker, F4 edits a saved [user] profile, F5 duplicates one or saves the current Ad Hoc definition under a name, and Delete removes a selected saved profile.
cli
Configure every source at startup
Source-specific option families cover Docker, SSH files and journalctl, iOS Simulator, macOS unified log, Android logcat, Kubernetes, AWS, Azure, GCP, OpenTelemetry, and syslog. Parser, expression-filter, Query Tab, time-zone, cache, debug, and pager options can be combined with them.
cli
App, tab, and stream handoff
logace app … opens a new LogAce.app window on macOS, logace tab file… sends existing files to a running instance, and logace stream [name] forwards redirected stdin into a named live tab.
settings
Grid and theme preferences
View → Settings controls horizontal row separators and padding around vertical column separators. Ctrl+Y chooses the global color theme; permanent highlight rules remain keyed by profile.
settings
Sidecar placement and GeoIP
Local-file state can live beside the log as <log>.las or under the LogAce state directory with a hashed name. Settings also accepts custom MaxMind City and ASN databases for GeoIP virtual columns.
state
Durable per-source state
Saved source state contains the selected profile and encoding, Ad Hoc definition, current physical anchor, bookmarks, expression-filter text and enabled state, plus per-profile column layouts and virtual columns.
state
Transient view state stays separate
Per-column filters, the current full-text search, and the active F7 wrap toggle survive reload or Duplicate while the tab is open, but they are not fields in the durable .las sidecar.
state
Global state and rebuildable cache
Preferences, recent history, expression and query history, Query Tab definitions, user profiles, sessions, and saved SSH connections live in the platform state directory. Source snapshots, live spools, merged timelines, and materialized query results use the separate cache directory.
grid
Visual-line and record navigation
Up/Down scroll one rendered line inside wrapped records; Ctrl+Up/Ctrl+Down select the previous or next logical record. Left/Right move one terminal column, while Ctrl+Left/Ctrl+Right jump between column starts.
grid
Horizontal and document edges
Home/End move to the horizontal beginning or end. Ctrl+Home/Ctrl+End jump to the first or last logical record; PageUp/PageDown retain page navigation.
view
Pager chrome without restarting
--pager starts the terminal viewer without menus, tabs, frames, headers, or status chrome. In terminal mode, Ctrl+P toggles that chrome for the current run.
query
Eligible Query Tab sources
Query Tabs can use reopenable local files and archives, SSH files or journals, macOS unified log, Android logcat, AWS, Azure, GCP, and OTel sources. They do not chain from another Query Tab or use transient Docker, Kubernetes, simulator, local journalctl, syslog, stdin, or merged spools as upstreams.
session
Reopenable source sets
Named sessions retain eligible source identities, their order, active tab, and expression-filter override. Opening a session is additive; Delete in the session picker removes the saved set without deleting its source logs.