Lookup

Resolves a single log line to its pattern (Payment_Gateway_Timeout-style fingerprint of recurring log shapes). Returns the pattern name, cost per service, recent cost change, first-seen date, and a suggested action (keep / reduce / filter).

Example

"what is this — ERROR Payment_Gateway_Timeout user_id=abc123 took=5021ms"

Matches Payment_Gateway_Timeout. ERROR severity. $4.2K/wk in payments-svc, up from $200/wk over 14 days. First seen 14 days ago. Suggested action: cap with the Reducer.

More to ask

• "is Retry_Backoff_Exhausted new?"
• "safe to drop DEBUG /healthz?"
• "what's GetCartAsync_called_with_userId costing us?"

Prerequisites

This tool requires the Reporter deployed for live pattern lookup. In CLI-only mode use Triage instead.

Tool schema (advanced)

Field	Type	Required	Default	Description
pattern	string	yes	—	Pattern name or search term (e.g., Payment_Gateway_Timeout).
service	string	no	—	Service to scope the lookup.
timeRange	string	no	7d	One of: 1d, 7d, 30d.
analyzerCost	number	no	from profile	log analyzer ingestion cost in $/GB.
environment	string	no	—	Environment nickname.