Troubleshooting with the system log¶
Scenario: users report that a flow times out. Reproduce the issue while watching the log.
Recent errors¶
Get-SnowSyslog -Level error -Last 50
By default Snowplow returns rows from the last 15 minutes, capped at 100.
Follow the log like tail -f¶
Get-SnowSyslog -Wait -Pretty -Source 'Flow Engine' -Message timeout -PollSeconds 10
Trigger the flow in another window; matching rows print as they arrive. Press Ctrl+C to stop.
Rank the noisiest sources¶
Get-SnowSyslog -Level error -Since (Get-Date).AddHours(-2) -Last 500 |
Group-Object source | Sort-Object Count -Descending |
Select-Object -First 5 Name, Count
Check slow transactions or a scoped app¶
Get-SnowSyslog -Table syslog_transaction -Since (Get-Date).AddMinutes(-30) -Last 200
Get-SnowSyslog -Table syslog_app_scope -Level error -Last 100
Capture evidence for a ticket¶
Get-SnowSyslog -Level error -User integration.user -Last 200 |
Export-SnowRecord -Format Json -Path .\integration-errors.json
Related: Get-SnowSyslog.