l24 command line interface

l24 is the command-line entry point for querying logs, forwarding live data, importing historical files, and running monitors.

In the overall docs flow, this chapter follows Web UI . The UI is usually the easiest place to explore data first; the CLI is where those workflows become repeatable in shells, scripts, services, and automation.

Install

curl -sSL https://logging24.com/install | bash

Command map

`query` / `q`	Run a search query on the logging24 API.
`forward` / `fwd`	Forward live log data to logging24 backends.
`import` / `imp`	Import a static log file into logging24.
`monitor` / `mon`	Monitor sources for patterns and trigger notifications.

Global options

`-D` , `--daemon`	Run in background mode
`-q` , `--quiet`	Suppress non-error output
`-v` , `--verbose`	Increase verbosity, repeatable up to four times

Common workflows

Query logs

l24 query --customer "$L24_CUSTOMER" ".*ERROR.*" env://L24_READ_TOKEN

Forward live files

l24 forward -t env://L24_WRITE_TOKEN tail /var/log/syslog

Import archived logs

l24 import /var/log/archive.log.gz env://L24_WRITE_TOKEN

Monitor a query result

l24 monitor query ".*ERROR.*" env://L24_READ_TOKEN --prefix 0 prod count lines > 0 notify console

Token model

query and monitor require read tokens. forward and import require write tokens. Tokens can be provided via env:// , file:// , or raw text input.

See Authentication Tokens for details.