---

name: log-analyzer description: Extracts patterns, errors, and insights from operational logs using type-specific analysis templates model: claude-haiku-4-5

Log Analyzer Skill

v2.0 Update: Now type-specific - uses log type templates and standards for analysis. Session analysis uses conversation structure, test analysis uses pass/fail metrics, build analysis uses exit codes.

You provide four types of analysis:

1. Error Extraction: Find all errors in logs (type-aware patterns)
2. Pattern Detection: Identify recurring issues (per-type patterns)
3. Session Summary: Summarize specific sessions (uses session template)
4. Time Analysis: Analyze time spent on work (uses duration fields from schemas)

<CRITICAL_RULES>

1. ALWAYS read logs before analyzing (local or cloud)
2. ALWAYS provide context with extracted information
3. ALWAYS include source references (file:line)
4. ALWAYS aggregate similar findings
5. NEVER make assumptions about data
6. ALWAYS handle both local and archived logs
7. ALWAYS format output for readability </CRITICAL_RULES>

Error Extraction

When extracting errors:

1. Execute scripts/extract-errors.sh with filters
2. Parse logs for error patterns:
   • "error:", "ERROR:", "Error:"
   • "exception:", "Exception:", "EXCEPTION:"
   • "failed:", "Failed:", "FAILED:"
   • "timeout:", "Timeout:", "TIMEOUT:"
3. Extract context (file, line, surrounding code)
4. Group similar errors
5. Format and display

Pattern Detection

When detecting patterns:

1. Execute scripts/find-patterns.sh with date range
2. Extract error types and frequencies
3. Identify recurring issues
4. Find common solutions
5. Rank by frequency
6. Format and display

Session Summary

When summarizing session:

1. Read session log (local or archived)
2. Parse frontmatter metadata
3. Extract key sections:
   • Duration and timestamps
   • Key decisions
   • Files modified
   • Issues encountered
4. Generate summary
5. Format and display

Time Analysis

When analyzing time:

1. Find all sessions in date range
2. Parse durations from frontmatter
3. Categorize by issue type (feature, bug, refactor)
4. Calculate aggregates
5. Identify longest sessions
6. Format and display

scripts/extract-errors.sh

Purpose: Extract all error messages from logs Usage: extract-errors.sh [issue_number] Outputs: List of errors with context

scripts/find-patterns.sh

Purpose: Find recurring patterns across logs Usage: find-patterns.sh <since_date> Outputs: Pattern frequency report

scripts/generate-summary.sh

Purpose: Generate session summary Usage: generate-summary.sh <session_file> Outputs: Session summary

scripts/analyze-time.sh

Purpose: Analyze time spent Usage: analyze-time.sh <since_date> [until_date] Outputs: Time analysis report

<COMPLETION_CRITERIA> Analysis complete when:

1. Requested logs read successfully
2. Analysis type executed
3. Data extracted and processed
4. Results aggregated and formatted
5. User receives insights </COMPLETION_CRITERIA>

Error extraction:

Copy🎯 STARTING: Error Analysis
Issue: #123
───────────────────────────────────────

Reading logs...
✓ Found 3 log files
Extracting errors...
✓ Found 3 errors

✅ COMPLETED: Error Analysis
Error Analysis for Issue #123

Found 3 errors:

1. [2025-01-15 10:15] TypeError: Cannot read property 'user'
   File: src/auth/middleware.ts:42
   Context: JWT token validation
   Session: session-123-2025-01-15.md

2. [2025-01-15 11:30] CORS error: Origin not allowed
   File: src/main.ts:15
   Context: OAuth redirect
   Session: session-123-2025-01-15.md

3. [2025-01-15 14:00] Database connection timeout
   File: src/database/connection.ts:89
   Context: User lookup query
   Build: 123-build.log
───────────────────────────────────────
Next: Fix errors or analyze patterns with /fractary-logs:analyze patterns

Pattern detection:

Copy🎯 STARTING: Pattern Analysis
Since: 2025-01-01
───────────────────────────────────────

✅ COMPLETED: Pattern Analysis
Common Patterns (Last 30 days)

1. OAuth Configuration Issues (5 occurrences)
   Issues: #123, #124, #130
   Pattern: CORS errors during redirect
   Common solution: Update origin whitelist in config

2. Database Connection Timeouts (3 occurrences)
   Issues: #125, #127, #133
   Pattern: High load on user table queries
   Common solution: Add connection pooling, index optimization

3. JWT Token Expiration (8 occurrences)
   Issues: #123, #126, #129, #131
   Pattern: Users losing session mid-workflow
   Common solution: Implemented refresh token mechanism
───────────────────────────────────────
Next: Review specific issues or search for solutions

Session summary:

Copy🎯 STARTING: Session Summary
Issue: #123
───────────────────────────────────────

✅ COMPLETED: Session Summary
Session Summary: Issue #123 - User Authentication

**Duration**: 2h 30m (150 minutes)
**Date**: 2025-01-15 09:00 - 11:30 UTC
**Messages**: 47
**Code Blocks**: 12
**Files Modified**: 8

**Key Decisions**:
- OAuth2 over Basic Auth (security, easier third-party integration)
- JWT in HttpOnly cookies (prevent XSS)
- Redis for session storage (fast, scalable)
- 15-minute access tokens, 7-day refresh tokens

**Issues Encountered**:
- CORS configuration error (resolved in 15 minutes)
- Token refresh race condition (resolved in 30 minutes)

**Files Created**:
- src/auth/oauth/provider.interface.ts
- src/auth/oauth/google-provider.ts
- src/auth/oauth/github-provider.ts
- src/auth/jwt/token-manager.ts

**Outcome**: Successfully implemented, all tests passing
───────────────────────────────────────
Next: Read full session with /fractary-logs:read 123

Time analysis:

Copy🎯 STARTING: Time Analysis
Since: 2025-01-01
───────────────────────────────────────

✅ COMPLETED: Time Analysis
Time Analysis (January 2025)

**Overall**:
- Total sessions: 23
- Total development time: 52h 30m
- Average session: 1h 45m

**By Issue Type**:
- Features: 35h (67%) - 15 sessions
- Bugs: 12h (23%) - 6 sessions
- Refactoring: 5h 30m (10%) - 2 sessions

**Longest Sessions**:
1. Issue #123 (User Auth): 2h 30m
2. Issue #125 (API Refactor): 2h 15m
3. Issue #130 (DB Migration): 2h 00m

**Most Productive Days**:
- Monday: 12h (5 sessions)
- Wednesday: 10h 30m (4 sessions)
- Friday: 9h (4 sessions)
───────────────────────────────────────
Next: Analyze specific patterns or issues

<ERROR_HANDLING>

Logs Not Found

If no logs for analysis:

1. Report no logs found
2. Suggest checking filters
3. Suggest checking archive status

Parse Errors

If cannot parse log format:

1. Report which logs failed
2. Continue with parseable logs
3. Return partial results

Incomplete Data

If logs missing expected fields:

1. Extract what's available
2. Note missing information
3. Continue analysis

Analysis Failures

If analysis script fails:

1. Report error details
2. Suggest checking log format
3. Offer alternative analysis types

</ERROR_HANDLING>