Cognition Commands
Query error logs, security events, runtime snapshots, anomaly feeds, and time-series telemetry with the Skytells Cognition CLI.
Skytells Cognition is the platform's AI-powered observability layer. It continuously analyzes your app's behavior to surface errors, security threats, runtime anomalies, and performance degradation — before they become incidents.
The CLI gives you direct access to all Cognition data streams without opening the Console.
Commands on this page
| Command | Description |
|---|---|
skytells cognition overview | Aggregated health summary |
skytells cognition errors | Recent error events |
skytells cognition security | Security alerts and threat events |
skytells cognition runtime | Runtime state snapshots |
skytells cognition anomalies | Detected anomalies feed |
skytells cognition events | Full paginated event stream |
skytells cognition timeseries | Time-series telemetry for dashboards |
skytells cognition overview
Returns a health summary for the linked project — error rate, active anomalies, security alerts, and runtime status.
Syntax
skytells cognition overview [--hours <n>] [--json]Flags
| Flag | Description |
|---|---|
--hours <n> | Lookback window in hours. Default: 24. |
--json | Output as JSON. |
Example
skytells cognition overview
skytells cognition overview --hours 72 --json | jq '.error_rate'skytells cognition errors
Lists recent error events captured by Cognition — with stack traces, request context, and occurrence counts.
Syntax
skytells cognition errors [--limit <n>] [--json]Flags
| Flag | Description |
|---|---|
--limit <n> | Number of recent errors to return. Default: 20. |
--json | Output as JSON (NDJSON when streaming). |
Examples
# View recent errors
skytells cognition errors
# Return 100 most recent errors as JSON
skytells cognition errors --limit 100 --json
# Surface unique error types
skytells cognition errors --json | jq -r '.[].type' | sort | uniq -c | sort -rn
# Find errors with stack traces containing a specific frame
skytells cognition errors --json | jq '.[] | select(.stack | contains("database_client"))'skytells cognition security
Returns security events detected by Cognition — authentication anomalies, suspicious access patterns, credential misuse, and high-severity threats.
Syntax
skytells cognition security [--limit <n>] [--json]Flags
| Flag | Description |
|---|---|
--limit <n> | Number of recent security events. Default: 20. |
--json | Output as JSON. |
Example
skytells cognition security
skytells cognition security --json | jq '.[] | select(.severity == "critical")'skytells cognition runtime
Returns current runtime snapshots — memory usage, CPU load, active connections, and goroutine/thread counts per app instance.
Syntax
skytells cognition runtime [--limit <n>] [--json]Flags
| Flag | Description |
|---|---|
--limit <n> | Number of runtime snapshots. Default: 20. |
--json | Output as JSON. |
Example
skytells cognition runtime
skytells cognition runtime --json | jq '.[] | "\(.app_id): CPU \(.cpu_pct)% MEM \(.mem_mb)MB"'skytells cognition anomalies
Returns detected behavioral anomalies — latency spikes, traffic surges, unusual error patterns, model drift.
Syntax
skytells cognition anomalies [--limit <n>] [--json]Flags
| Flag | Description |
|---|---|
--limit <n> | Number of anomalies to return. Default: 20. |
--json | Output as JSON. |
Example
skytells cognition anomalies
skytells cognition anomalies --json | jq '.[] | select(.score > 0.8)'skytells cognition events
Returns the full ordered event stream from Cognition — all signals combined. Supports pagination for long-running investigation sessions.
Syntax
skytells cognition events [--since <id>] [--limit <n>] [--json]Flags
| Flag | Description |
|---|---|
--since <id> | Return events after this event ID. Enables cursor-based pagination. |
--limit <n> | Number of events per page. Default: 50, max: 200. |
--json | Output as JSON. |
Paginating through events
# First page
FIRST=$(skytells cognition events --limit 200 --json)
echo $FIRST | jq -r '.[-1].id' # capture last event ID
# Next page
skytells cognition events --since evt_last_id --limit 200 --jsonskytells cognition timeseries
Returns metric time series suitable for charting or dashboard export — error rate, latency percentiles, request throughput, and anomaly scores over time.
Syntax
skytells cognition timeseries [--hours <n>] [--json]Flags
| Flag | Description |
|---|---|
--hours <n> | Lookback window in hours. Default: 24. |
--json | Output as JSON. |
Example
skytells cognition timeseries --hours 48
skytells cognition timeseries --json | jq '.series[] | "\(.timestamp) p99=\(.latency_p99)ms"'Real-time incident investigation
#!/bin/bash
# Full incident snapshot — errors + security + anomalies
echo "=== ERRORS ===" && skytells cognition errors --limit 10
echo "=== SECURITY ===" && skytells cognition security --limit 10
echo "=== ANOMALIES ===" && skytells cognition anomalies --limit 10
echo "=== RUNTIME ===" && skytells cognition runtimeHow is this guide?