Workflows

You will learn practical routines for getting value from Cordo day to day.

Concepts explain the nouns. Workflows turn them into steps you can follow.

Account and streams

• Sign up, sign in and sessions
• Create and manage streams
• Manage stream API keys
• Configure retention

Ingest

• Ingest your logs — chooser for every method
• Ingest JSON logs
• Ingest plain-text logs
• OpenSearch-compatible ingest
• OpenTelemetry ingest
• Ingest from systemd / journald
• Ingest with Vector and Fluent Bit

Explore and analyze

• Query events
• Create and manage views
• Use Insights
• Clear a field type conflict
• Manage personal access tokens

Detect and alert

• Detect and alert — record a metric, watch it with a monitor, deliver alerts to a channel, and read alerts and monitor history

Anomaly detection

• Turn on anomaly detection — scan a stream against its own history, and choose sensitivity, ignored services, and metrics
• Review findings — read a finding's evidence, then dismiss, mute, or watch
• Alert on findings — send findings to Slack, email, PagerDuty, or a webhook with a Findings monitor
• Turn a pattern into a monitor — a standing metric and monitor for one log pattern
• Find what's unusual with an agent — the MCP recipe

Next

If you are still setting up, start with Create and manage streams, then Ingest your logs.