--app APP | App name or UUID (reads from config if omitted) | inferred from config |
--tail N / -t N | Number of log lines, at most 500; higher values are capped. Alias --limit | 100 |
--since SINCE / -s SINCE | Time filter (1h, 30m, 2d, or ISO timestamp) | none |
--error / -e | Errors only (shorthand for --severity ERROR) | off |
--severity LEVEL | Exact severity: DEFAULT, DEBUG, INFO, WARNING, ERROR, CRITICAL | none |
--service SVC | Filter to specific services (repeatable or comma-separated) | none |
--cron NAME | Filter to one cron job by name. Cannot combine with --service. Pass --env too: a job that exists in both dev and prod returns LOGS_QUERY_ERROR without it. | none |
--search TEXT | Filter log messages by text (case-insensitive) | none |
--deployment ID | Filter to one deployment by ID, or latest for the app’s latest deploy | none |
--cursor CURSOR | Continue a paginated query from a previous response’s next_cursor. Paging works only with at most one --service. | none |
--live / -f | Stream in real time (polls every 2s); kept for compatibility, prefer the tail subcommand. Alias --follow. Cannot combine with --output. | off |
--output PATH / -o PATH | Write logs to a file (JSON with --json, otherwise plain text) | none |
--env ENV | Environment to query: dev or prod | all environments |
--requests | Show HTTP requests captured by floo’s gateway (public URL, status, latency) instead of app-level log output. Only --app, --tail, --since, and --live apply; other logs flags are ignored. | off |