Read and export logs

Where: triage → logs, a Pod detail, or a linked investigation. Reads require Pod log permission.

Choose context, namespace, Pod/workload, and container. Select current logs or previous logs, then use search, pause, range, and stream controls. Multiple streams have bounded local buffers; reconnects and pauses can create gaps. Previous logs refer to the last retained terminated container and may be gone after rotation, eviction, or replacement.

Download/export only after checking scope and secrets. A successful empty response differs from unavailable or interrupted evidence. For a small reviewed excerpt, use incident handoff.

Source: src/routes/cluster/LogsTab.tsx, src/components/logs/LogsPanel.tsx, src/state/logStream.ts, src-tauri/src/k8s/logs.rs at v0.18.0.