Logfmt Log Parser

Overview

You send logfmt text and we return one record per line plus an error report that names the line and column of every pair we could not read. The grammar is published in full: a bare value may contain an equals sign, a bare key comes back as null where an empty assignment comes back as an empty string, and an unterminated quote ends that line rather than turning the rest of it into fields nobody logged. Malformed pairs never fail the call, so one stray quote in fifty thousand lines still gives you the other lines. We hold nothing, forward nothing and read no clock.

Nothing else in the catalog turns logfmt into structured fields: the log redactor labels the format but still returns text, so you had to write the grammar yourself and get the equals-sign and quoting rules wrong.

When to use it

Scope

Non-goals

• Does not store, buffer, index or forward anything between calls
• Does not scrape, poll or receive logs over a network
• Does not redact or mask anything — send the text to security.redact_secrets first
• Does not interpret what a field means or what an error was caused by
• Does not accept a caller-supplied regular expression on any field

Properties

Capabilities

Cost & billing

Flat rate per invocation

File handling

File limits

Constraints this skill applies to your input and generated files. The “Limited by” column shows the static source of each cap; none of these can be raised by upgrading your plan.

How we handle your data

Input schema

Output schema

API contract

curl -sS -X POST "$BASE/v1/execute" -H "Authorization: Bearer $KEY" -H 'Content-Type: application/json' -d '{"skillKey":"observability.parse_logfmt","input":{"logs":"level=info msg=\"request served\" duration_ms=42\n"}}'

import { Squillify } from "@squillify/sdk";

const sq = new Squillify({ apiKey: process.env.SQUILLIFY_API_KEY });

const { output } = await sq.execute("observability.parse_logfmt", {"logs":"level=info msg=\"request served\" url=https://api.example.com/p?a=b&c=d retry\nlevel=warn msg=\"slow upstream\" duration_ms=812\n"});

Errors

Other limits

Limitations

• Does not store, buffer, index or forward anything between calls
• Does not scrape, poll or receive logs over a network
• Does not redact or mask anything — send the text to security.redact_secrets first
• Does not interpret what a field means or what an error was caused by
• Does not accept a caller-supplied regular expression on any field
• Reading newline-delimited JSON logs, which observability.parse_json_logs answers
• Removing secrets from a log body before you share it

How to call

POST /v1/execute (requires authentication)

{
  "skillKey": "observability.parse_logfmt",
  "input": {
    "logs": "level=info msg=\"request served\" url=https://api.example.com/p?a=b&c=d retry\nlevel=warn msg=\"slow upstream\" duration_ms=812\n"
  }
}

Examples

{
  "logs": "level=info msg=\"request served\" url=https://api.example.com/p?a=b&c=d retry\nlevel=warn msg=\"slow upstream\" duration_ms=812\n"
}

{
  "records": [
    {
      "line": 1,
      "fields": {
        "level": "info",
        "msg": "request served",
        "url": "https://api.example.com/p?a=b&c=d",
        "retry": null
      }
    },
    {
      "line": 2,
      "fields": {
        "level": "warn",
        "msg": "slow upstream",
        "duration_ms": "812"
      }
    }
  ],
  "errors": [],
  "summary": {
    "lineCount": 2,
    "recordCount": 2,
    "blankLineCount": 0,
    "fieldCount": 7,
    "errorCount": 0,
    "errorsTruncated": false,
    "truncated": false,
    "sourceKind": "INLINE"
  }
}

{
  "includeRecords": false,
  "logs": "level=error msg=\"unterminated\n"
}

{
  "records": [],
  "errors": [
    {
      "line": 1,
      "code": "UNTERMINATED_QUOTE",
      "column": 17,
      "key": "msg"
    }
  ],
  "summary": {
    "lineCount": 1,
    "recordCount": 1,
    "blankLineCount": 0,
    "fieldCount": 1,
    "errorCount": 1,
    "errorsTruncated": false,
    "truncated": false,
    "sourceKind": "INLINE"
  }
}

Recommended use cases

• Turn a captured logfmt stream into records you can filter and join
• Find the exact line and column where a producer emits malformed pairs

Avoid for

• Reading newline-delimited JSON logs, which observability.parse_json_logs answers
• Removing secrets from a log body before you share it

Related skills

Composable with

Safety & privacy

• Runs without calling any external service.
• Your payloads are never stored permanently.
• Telemetry captures metadata only — never your payload contents.
• We never train models on your payloads.
• No human reviews your payloads.

Tags