Logtail

The API covers log ingestion and querying. Log ingest accepts structured JSON payloads via HTTP POST — agents can ship structured log objects directly without a log forwarder or agent daemon. The query interface enables agents to retrieve historical log data, compute log statistics, and build automated alerting on log patterns. The structured JSON model means queries can target specific log fields rather than parsing unstructured text.

Reliability is vendor-managed as part of Better Stack's infrastructure. Log ingestion is designed for high throughput without data loss. Teams relying on Logtail for audit-critical log retention should verify retention policies and configure appropriate backup strategies for compliance requirements.

Logtail is the log management component of Better Stack (which also includes Uptime and On-Call products). It provides structured log ingestion with a SQL-compatible query interface — logs are stored as structured JSON objects queryable through a familiar syntax. For agents generating structured operational logs or needing to query log data programmatically, Logtail's ingest API and query interface provide a practical structured log layer without the operational overhead of managing Elasticsearch or similar infrastructure.

Authentication uses source tokens for log ingestion (each log source has its own token) and API keys for management operations and querying. The source token model provides appropriate per-source access control. Teams should treat management API keys as sensitive — they provide access to query all log data, which may contain sensitive operational information.

Documentation is developer-friendly and covers the structured log ingest patterns and query syntax clearly. The integration guides for common logging libraries (Node.js, Python, Ruby, Go) are practical. Teams adopting Logtail for agent structured logging will find the documentation quality high relative to the platform's maturity.