# Querying Logs

Query structured logs for troubleshooting.

## Common Queries

```sql
-- Find all events for correlation ID
CorrelationId = "abc-123-def"

-- Find errors in last hour
Level = "Error" AND @Timestamp > Now() - 1h

-- Consumer lag warnings  
EventId = 3004 AND Lag > 1000
```

## See Also

- [Logging Overview](README.md)