Commands

CLI Flags

These flags are passed when launching logana from the shell:

Flag	Description
`<file>`	File or directory to open. Omit to read from stdin.
`-f`, `--filters <path>`	Preload a saved filter set (JSON). Filters are applied in a single pass during indexing and remain active for interactive use.
`-i`, `--include <args>`	Add an include filter. Accepts the same arguments as `:filter`. May be repeated. Examples: `-i "error"`, `-i "--field level=ERROR"`
`-o`, `--exclude <args>`	Add an exclude filter. Accepts the same arguments as `:exclude`. May be repeated. Examples: `-o "debug"`, `-o "--field level=debug"`
`-t`, `--timestamp <args>`	Add a date/time range filter. Accepts the same arguments as `:date-filter`. May be repeated.
`--tail`	Start at the end of the file and enable tail mode. Combined with `--filters`, the last matching line is available immediately after loading.
`--mcp [PORT]`	Start the embedded MCP server on launch. Port defaults to 9876. See MCP Server.
`--headless`	Run without TUI — apply filters and write matching lines to stdout or `--output`.
`--output <path>`	Write headless output to a file instead of stdout. Requires `--headless`.

In-App Commands

Press : in normal mode to open command mode. Tab completes commands, flags, colors, themes, and file paths. Command history is navigable with Up / Down.

Filtering

Command	Description
`:filter [--regex\|-r] [-l] [--fg COLOR] [--bg COLOR] <pattern>`	Add an include filter (show only matching lines)
`:filter --field <key>=<value>`	Add a field-scoped include filter (e.g. `level=error`)
`:exclude [--regex\|-r] <pattern>`	Add an exclude filter (hide matching lines)
`:exclude --field <key>=<value>`	Add a field-scoped exclude filter (e.g. `level=debug`)
`:date-filter <expr>`	Add a date/time range filter
`:set-color [--fg COLOR] [--bg COLOR]`	Set highlight color for the selected filter
`:save-filters <file>`	Save current filters to a JSON file
`:load-filters <file>`	Load filters from a JSON file

Flag ordering: All options (--regex, --fg, --bg, -l, --field) must appear before the pattern. Everything after the first pattern word is treated as part of the pattern text.

See Filtering, Date & Time Filters, and Field Filters for full details.

Command	Description
`:<N>`	Jump to line N (e.g. `:500`)

Files and Tabs

Command	Description
`:open <path>`	Open a file or directory
`:close-tab`	Close the current tab

Display

Command	Description
`:wrap`	Toggle line wrap on/off (persisted across sessions)
`:line-numbers`	Toggle the line number gutter on/off (persisted across sessions)
`:tail`	Toggle tail mode (auto-scroll on new content)
`:raw`	Toggle raw mode — bypass the format parser and show unformatted log lines; title shows `[RAW]` when active
`:level-colors`	Open the level colors dialog — toggle coloring per level (TRACE, DEBUG, INFO, NOTICE, WARNING, ERROR, FATAL); INFO/TRACE/DEBUG/NOTICE are off by default
`:value-colors`	Open the value colors dialog — toggle coloring for HTTP methods, status codes, IPs, UUIDs, and process/logger names
`:set-theme <name>`	Switch the color theme (persisted across sessions)
`:sidebar-position left\|right`	Move the filter sidebar to the left or right of the log panel (persisted across sessions)

OTel Collector

Command	Description
`:otel [port]`	Open an OTLP gRPC receiver tab (default port 4317)
`:otel --http [port]`	Open an OTLP HTTP/JSON receiver tab (default port 4318)

See OTel Collector for full details.

MCP Server

Command	Description
`:enable-mcp [--port N]`	Start the embedded MCP server (default port 9876)
`:disable-mcp`	Stop the MCP server

See MCP Server for full details.

Live Data

These commands control how the current tab handles incoming data from a file watcher or stream (stdin, Docker).

Command	Description
`:stop`	Permanently stop all incoming data for the current tab — drops the file watcher and/or stream
`:pause`	Freeze the view; the background watcher/stream keeps running. Title shows `[PAUSED]`
`:resume`	Resume applying incoming data; the latest snapshot is applied immediately

Note: :pause / :resume are non-destructive — no data is lost while paused. :stop is permanent; to resume watching a file after stopping, reopen it with :open.

Structured Fields

Command	Description
`:fields [col ...]`	Set visible columns (e.g. `:fields timestamp level message`)
`:hide-field <col>`	Hide a single column
`:show-field <col>`	Show a previously hidden column
`:show-all-fields`	Reset to default column display
`:select-fields`	Open an interactive column picker
`:show-keys`	Show field keys alongside values (e.g. `method=GET`)
`:hide-keys`	Show only values, hiding field keys (default)

Merged View

Command	Description
`:merge`	Open a source-selection popup, then create a new tab interleaving the selected tabs sorted by timestamp

See Multi-Tab for full details.

Export and Streaming

Command	Description
`:export <file> [-t <template>]`	Export annotations to a file (default template: markdown)
`:docker`	Pick and stream a running Docker container
`:dlt`	Pick and stream from a DLT daemon over TCP

Session

Command	Description
`:reset`	Restore all settings to defaults and clear all persisted state

Tab Completion

Command mode supports multi-tier tab completion:

Color names — after --fg or --bg flags
Template names — after -t / --template flags in :export
File paths — for :open, :save-filters, :load-filters, :export
Theme names — for :set-theme
Command names — for everything else

Press Tab / Shift+Tab to cycle through completions. A highlighted suggestion appears in the hint area; Space accepts it.

Keyboard shortcuts

logana