Quickstart

Use the quickstart flow to run Sydes against raw logs and get a first incident-oriented hypothesis quickly.

sydes incident analyze logs/*.log \
  --query "Why are session lookups failing?"

Best results usually come from focused inputs using --query, --grep, or both together.