logging.level globally. A flag has no effect unless a subsystem checks it.
How it works
- Flags are case-insensitive strings, resolved from
diagnostics.flagsin config plus theOPENCLAW_DIAGNOSTICSenv override, deduped and lowercased. name.*matchesnameitself and anything undername.(for exampletelegram.*matchestelegram.http).*orallenables every flag.- Restart the gateway after changing
diagnostics.flagsin config; it is not hot-reloaded.
Known flags
Enable via config
Env override (one-off)
OPENCLAW_DIAGNOSTICS=0 disables flags from both env and config for that
process, useful for temporarily silencing a profiler flag left on in config
without editing the file.
Profiler flags
Slow reply preparation and Codex startup are logged at the default log level without profiler flags: a stage taking at least 5 seconds or a tracked total taking at least 10 seconds emits a warning. Fast paths remain quiet. Profiler flags lower the timing thresholds to 500 milliseconds per stage and 1 second total, and enable additional detail. Enable all profiler-gated spans for one gateway run:profiler enables both the reply profiler and the Codex profiler; use the
scoped flag names to enable just one.
Or set it in config:
diagnostics.flags and restart, or start the process with
OPENCLAW_DIAGNOSTICS=0 to override every diagnostics flag for that run.
Timeline artifacts
Thetimeline flag (alias: diagnostics.timeline) writes structured startup
and runtime timing events as JSONL, for external QA harnesses:
OPENCLAW_DIAGNOSTICS_TIMELINE_PATH, even
when the flag itself is set in config; there is no config key for the path.
See Environment variables for where OpenClaw reads
OPENCLAW_DIAGNOSTICS, OPENCLAW_DIAGNOSTICS_TIMELINE_PATH, and
OPENCLAW_DIAGNOSTICS_EVENT_LOOP from, and in what precedence order.
When timeline is enabled only from config, the earliest config-loading spans
are missing because OpenClaw has not read config yet; subsequent startup spans
are captured normally.
OPENCLAW_DIAGNOSTICS=1, =all, and =* also enable the timeline, since they
enable every flag. Prefer the scoped timeline flag when you only want the
JSONL artifact and not every other diagnostics flag.
Event-loop delay samples in the timeline need one more opt-in beyond
timeline: set OPENCLAW_DIAGNOSTICS_EVENT_LOOP=1 (or on/true/yes) on
top of enabling the timeline.
Timeline records use the openclaw.diagnostics.v1 envelope and can include
process ids, phase names, span names, durations, plugin ids, dependency
counts, event-loop delay samples, provider operation names, child-process exit
state, and startup error names/messages. Treat timeline files as local
diagnostics artifacts; review before sharing them outside your machine.
Embedded model requests add a provider.request.started mark and one terminal
provider.request record, correlated by run and call/span ids. While streaming,
provider.request.activity marks sample observed chunks at most once per 30
seconds using the existing stream-progress reporter. The terminal
record keeps the request start in timestamp and reports terminalAtMs, the
last observed provider callback/chunk time (lastProviderActivityAtMs, when
observed), and a bounded terminalReason. Activity includes bookkeeping chunks;
it does not prove visible output, and delayed result settlement does not refresh
an already observed terminal chunk. An unknown reason or absent activity is not
evidence of a provider, timeout, or CPU failure.
model.recovery.decision marks report the existing attempt owner’s accepted or
rejected recovery branch alongside replay-safety and prior tool-settlement
booleans. model.retry.decision marks explain the retry owner’s budget, delay,
and wait outcomes. These marks add no prompt, tool arguments, raw error text,
model routes, or session identities. They do not change retry or timeout policy
and are emitted only through the existing opt-in timeline.
Timeline writes batch adjacent events with the same destination into a bounded
64 KiB buffer, flushed on the next event-loop turn, at capacity, or on normal
process exit. Event timestamps reflect emission time. Writes remain best-effort;
a forced kill can lose pending output. External harnesses should read the final
artifact after the process exits and must not truncate it while the process runs.
Where logs go
Flags emit logs into the standard diagnostics log file. By default:/tmp/openclaw/openclaw-<profile>-YYYY-MM-DD.log; for
example, --dev uses openclaw-dev-YYYY-MM-DD.log.
If you set logging.file, use that path instead. Logs are JSONL (one JSON
object per line). Redaction still applies; it is always on.
See Logging for the full log-path resolution, rotation, and
redaction model.
Extract logs
Read the active profile’s latest log file:openclaw logs --follow instead (see
/cli/logs).
Notes
- If
logging.levelis set toerror,fatal, orsilent, flag-gated logs may be suppressed. Defaultinfois fine. brave.httplogs Brave Search request URLs/query params, response status/timing, and cache hit/miss/write events. It does not log the API key (sent as a request header) or response bodies, but search queries can be sensitive.- Flags are safe to leave enabled; they only affect log volume for the specific subsystem.
- Use /logging to change log destinations, levels, and redaction.