Axiom

Query Axiom datasets using APL (Axiom Processing Language). Supports log search, aggregation, field analysis, and time-based filtering.

Setup

Create .env in this skill directory:

AXIOM_TOKEN=xaat-your-token-here
AXIOM_ORG_ID=your-org-id
AXIOM_DATASTREAM=civitai-prod
AXIOM_DOMAIN=api.axiom.co

Token needs read/query permissions (the project .env token is ingest-only).

Quick Reference

SKILL_DIR=".claude/skills/axiom"

# List available datasets
node "$SKILL_DIR/axiom.mjs" datasets

# Run an APL query
node "$SKILL_DIR/axiom.mjs" query "['civitai-prod'] | where name == 'nowpayments-webhook' | take 10" --format legacy --json

# Search logs with filters
node "$SKILL_DIR/axiom.mjs" query "['civitai-prod'] | where name == 'some-service' and type == 'error' | project _time, message, error | sort by _time desc | take 50" --start "2026-03-01T00:00:00Z" --end "2026-04-01T00:00:00Z" --format legacy --json

# Count errors by message
node "$SKILL_DIR/axiom.mjs" query "['civitai-prod'] | where name == 'my-service' | summarize count() by message | order by count_ desc" --start "2026-03-01T00:00:00Z" --format legacy --json

# Top values for a field
node "$SKILL_DIR/axiom.mjs" query "['civitai-prod'] | where type == 'error' | summarize count() by name | order by count_ desc | take 20" --format legacy --json

Commands

Command	Description
`datasets`	List all available datasets
`dataset-info <name>`	Get info about a specific dataset
`query "<APL>"`	Run any APL query
`search <dataset> --where "..."`	Search with filters
`count <dataset> --where "..." --by <field>`	Count/aggregate
`tail <dataset>`	Most recent events
`top <dataset> <field>`	Top values for a field

Important Notes

Use --format legacy --json for reliable output. The tabular format can return empty rows for some queries.
Time ranges: Use --start and --end flags with ISO 8601 timestamps, or use ago() in APL (e.g., _time > ago(24h)).
Field paths: Log data is under the data. prefix in legacy format. Use field names directly in APL (e.g., name, message, type).
Summarize queries: Return results in buckets.series[].groups[] in legacy format, not in matches[].

Known Datasets

Dataset	Description
`civitai-prod`	Main production logs (services, webhooks, jobs)
`civitai-stage-new`	Staging environment
`civitai-next`	Next.js application logs
`webhooks`	Webhook event tracking
`clickhouse`	ClickHouse integration errors
`notifications`	Notification service logs
`orchestration-otlp`	Orchestration telemetry
`python-worker`	Python worker process logs

Common Log Names (civitai-prod)

Services log with a name field. Common ones:

nowpayments-webhook — NowPayments IPN webhook handler
nowpayments-service — NowPayments deposit processing
reconcile-nowpayments-job — Reconciliation cron job

APL Cheatsheet

# Filter
| where name == "value"
| where field contains "substring"
| where field matches regex "pattern"

# Time range
| where _time > ago(7d)
| where _time between (datetime(2026-03-01) .. datetime(2026-03-31))

# Aggregate
| summarize count() by field
| summarize avg(duration), max(duration) by name
| summarize count() by bin(_time, 1h)

# Sort and limit
| sort by _time desc
| take 50
| order by count_ desc

# Select fields
| project _time, name, message, error

# Extend (computed columns)
| extend duration_ms = duration / 1000

When to Use

Investigating production errors or webhook failures
Checking if a specific service is logging errors
Analyzing error patterns over time
Debugging payment/deposit processing issues
Monitoring reconciliation job health
Verifying deployment behavior changes