Sazabi
BackendsExternal Backends

Mezmo

Query Mezmo logs directly from Sazabi without moving data.

Overview

Mezmo (formerly LogDNA) is a log management platform. With Sazabi's Mezmo backend, you can query your Mezmo logs directly from Chat without duplicating data.

What you can query

When Mezmo is configured as a backend, Chat can access:

  • Logs: Search and analyze logs stored in Mezmo
  • Apps: Filter logs by application name
  • Hosts: Filter logs by hostname
  • Levels: Filter by severity level (debug, info, warn, error, critical)

Prerequisites

Before you begin, make sure you have:

  • A Mezmo account with logs flowing into it
  • Access to generate service keys in your Mezmo organization

Setup

Generate a service key in Mezmo

  1. Log in to your Mezmo dashboard
  2. Go to Settings > Organization > API Keys
  3. Click Generate Service Key
  4. Give it a descriptive name like "Sazabi Integration"
  5. Copy the key and store it securely

Use a Service Key, not an Ingestion Key. Service keys have read permissions for querying logs. Ingestion keys are for sending logs to Mezmo and will not work for this integration.

Enter your service key

Paste your Mezmo service key when prompted. Sazabi validates the key by making a test query to the Mezmo Export API.

If validation fails, verify:

  • You are using a service key (not an ingestion key)
  • The key has not been revoked in Mezmo
  • Your Mezmo account has active logs

Confirm and connect

Click Connect to save the configuration. Chat can now query your Mezmo logs directly.

Required permissions

Mezmo service keys provide read access to logs via the Export API. There are no granular permission scopes to configure. The service key grants access to all logs in your Mezmo organization.

If you need to restrict access:

  • Create a separate Mezmo organization for the logs you want Sazabi to access
  • Generate a service key for that specific organization

Query capabilities

Search syntax

Mezmo uses free-text search across log lines:

PatternDescription
errorFind logs containing "error"
connection timeoutFind logs containing both words (AND)
"connection timeout"Find logs with the exact phrase
-debugExclude logs containing "debug"

Filtering

Chat can filter Mezmo logs by:

  • Applications: Filter by the app field (e.g., "api-server", "worker")
  • Hosts: Filter by hostname (e.g., "web-01", "db-01")
  • Levels: Filter by severity (debug, info, notice, warn, error, critical, alert, emergency)
  • Time range: Query logs within a specific time window

Sorting

  • Newest first: Most recent logs appear first (default)
  • Oldest first: Oldest logs appear first

Limitations

  • Query size: Maximum 10,000 log entries per query. For larger result sets, narrow your time range or add filters.
  • Timeseries aggregation: Computed client-side from raw log entries. Queries that would require aggregating more than 10,000 entries will fail with an error asking you to narrow the time range.
  • Real-time: There may be a slight delay between logs appearing in Mezmo and being queryable through Sazabi.
  • Field queries: Mezmo's Export API uses free-text search. Complex field-based queries may not be supported.

Use cases

Configure Mezmo as a backend when:

  • You have an existing Mezmo deployment with production logs
  • You want to query Mezmo alongside other observability platforms in Sazabi
  • Compliance requirements prevent duplicating log data
  • You prefer to keep log storage and retention in Mezmo

Troubleshooting

Invalid service key

Verify you are using a service key, not an ingestion key. Service keys are generated under Settings > Organization > API Keys and are used for reading logs. Ingestion keys are only for sending logs to Mezmo.

No logs returned

  • Check that logs exist in Mezmo for the queried time range
  • Verify your application names and hostnames match the filters
  • Try a broader search without filters to confirm connectivity
  • Ensure the service key has not been revoked

Query truncated error

Queries are limited to 10,000 entries. If you see a truncation error:

  • Narrow your time range
  • Add filters to reduce the result set
  • Use more specific search terms

Permission denied

Service keys provide organization-wide read access. If you see permission errors, the key may have been revoked. Generate a new service key in Mezmo and update your Sazabi configuration.

Slow queries

Large time ranges or broad searches can be slow. To improve performance:

  • Use shorter time ranges
  • Add filters for specific apps, hosts, or levels
  • Use specific search terms instead of broad queries

Security

Your Mezmo service key is encrypted at rest in Sazabi's database. The key is only decrypted when making queries to the Mezmo Export API. Sazabi does not store or cache your log data; all queries are executed directly against Mezmo's API.

To revoke access, either:

  • Disconnect Mezmo from Sazabi in Settings > Data Sources
  • Revoke the service key in Mezmo under Settings > Organization > API Keys