Frequently Asked Questions¶
Quick answers to common questions, with pointers to deeper docs.
When should I use Kelora instead of grep, awk, or jq?¶
Use Kelora when logs are messy, you need stateful transforms, or you want to combine parsing, filtering, and analysis in one streaming pipeline. For simple text search use grep, and for pure JSON querying use jq. The Quickstart shows where Kelora shines, and When to Use Kelora vs External Tools goes deeper.
How do I choose the right input format?¶
Start with auto-detection (-f auto, the default). If detection disagrees, force a format like -j for JSON, -f logfmt, or -f line. The Format Reference lists all formats and parsing options.
How do I parse a custom format?¶
Use -f 'cols:...' for fixed columns or -f 'regex:...' for pattern-based parsing, then iterate with -F inspect. The Parsing Custom Formats tutorial walks through both approaches.
Why am I getting no output?¶
Typical causes are filtering everything out, quiet/silent output flags, or time filters that exclude your data. The Common Errors Reference has a quick checklist.
Why does my filter not see fields I just created?¶
Stages run in the exact CLI order you specify. Create fields before filtering on them, and place --levels where you want level filtering to occur. See Scripting Stages for examples.
How do I debug filters or Rhai scripts?¶
Use -F inspect to see fields and types, --verbose to surface errors, and --strict to fail fast. The Common Errors Reference and Functions Reference cover patterns for safe access and type conversion.
How do I filter by time or control timezones?¶
Use --since/--until for time ranges, --ts-format when timestamps are custom, and --input-tz if logs lack timezone info. See the Time Reference for full syntax.
How do I handle multiline logs or stack traces?¶
Enable multiline with -M and pick a strategy. See Multiline Strategies and run kelora --help-multiline for detailed options.
Can Kelora read compressed files or archives?¶
Gzip files (.gz) are handled automatically. For archives and batch processing patterns, see Process Archives at Scale.
How do I control output, stats, and diagnostics?¶
Use -F to pick an output format, -q/--quiet to suppress events, and -s/--stats or -m/--metrics for summaries. For zero terminal output with metrics files still written, use --silent. See the CLI Reference.
How do I make Kelora faster on large files?¶
Prefer native flags like --levels over Rhai filters, prune with --keep-lines early, and use --parallel for big files. Disable diagnostics with --silent or --no-diagnostics when you only need output files. See the Performance Model.
Can I disable emoji output or colors?¶
Yes. Use --no-emoji to switch to plain text output and --no-color (or the NO_COLOR environment variable) to disable colors. See the CLI Reference.
Was Kelora built with AI?¶
Yes. Kelora is an experiment in agentic AI development: AI agents generate the implementation and tests, and human oversight focuses on requirements and validation. See the Development Approach and the Security Policy before production use.
How does configuration precedence work?¶
CLI flags override .kelora.ini, which overrides ~/.config/kelora/kelora.ini, which overrides defaults. The Configuration System explains precedence and aliases.
Is there an interactive mode for tricky shell quoting?¶
Yes. Run kelora with no arguments to enter the REPL. It supports history, glob expansion, and built-in :help. See Quickstart.
Where is the full CLI and function reference?¶
Docs live in the CLI Reference and Functions Reference. On the command line, use kelora --help and kelora --help-functions for the same information.
What exit codes does Kelora use?¶
See the Exit Codes Reference for the full list and automation tips.