Log Lens reads its settings once from config.php and caches them. Any missing key falls back to a built-in default, so a partial or older file keeps working. The two deployment secrets - LOG_LENS_URL and LOG_LENS_TOKEN - are best set in the environment or a root-level .env file; a real environment variable always wins over .env. See Environment variables.
Top level
| Key | Default | Meaning |
|---|
LOG_LENS_URL | (empty) | Canonical base URL, used by the command-line AI skills and when pinning a URL behind a proxy. Empty means the base is derived from the request. Trailing slash trimmed. |
auth
| Key | Default | Meaning |
|---|
auth.token | '' (from LOG_LENS_TOKEN) | Empty string leaves the API unauthenticated (local-first default). Any non-empty value turns auth on - every request must then send X-Log-Lens-Token: <token> or Authorization: Bearer <token>. |
See API key authentication.
ingestion
| Key | Default | Meaning |
|---|
default_severities | ['ERROR', 'WARNING'] | Severities indexed by brand-new application workspaces. Existing workspaces are unaffected; each can change this later in the UI. |
log_file_pattern | /\.log(?:\.\d+)?$/i | PCRE (with delimiters) deciding whether a file name counts as a log. Widen for other names, e.g. /\.(log|out|err)(?:\.\d+)?$/i. |
sample_bytes | 65536 | Bytes read from a file's head to detect which parser handles it. |
capture_limit | 4194304 | Max bytes accumulated for a single multiline event body. |
message_limit | 120000 | Max characters stored per group sample (message, stack, context). |
context_preview_limit | 12000 | Max characters stored for each occurrence's context preview. |
See Choose which severities to index and Which files count as logs.
| Key | Default | Meaning |
|---|
default_limit | 50 | Default page size for issue-list endpoints. |
max_limit | 200 | Hard maximum page size. |
sync
| Key | Default | Meaning |
|---|
chunk_size | 8388608 | Bytes fetched per round when appending from a connector source. |
max_discovered_files | 10000 | Ceiling on files a single SSH pattern set may discover. |
prefix_hash_bytes | 1048576 | Prefix length hashed to reconcile connector streams with manual imports. |
ssh
| Key | Default | Meaning |
|---|
default_port | 22 | Default SSH connector port. |
connect_timeout | 10 | SSH connection timeout in seconds. |
database
| Key | Default | Meaning |
|---|
busy_timeout | 5000 | Milliseconds SQLite waits on a locked database before giving up. |
retention
Automatically prunes the processed/ archive after each incoming import. Deleting an archived file only removes raw-event retrieval for its occurrences; indexed issues and counts stay intact. 0 disables a rule.
| Key | Default | Meaning |
|---|
processed_max_age_days | 0 | Delete archived logs older than N days. |
processed_max_files | 0 | Keep only the N newest archived logs. |
See Prune the processed archive.