Skip to main content
Bronto provides a powerful query interface for searching, analyzing, and visualizing your log data. Queries can be written in two different modes, depending on your needs:
  • Simple mode — quick, guided filtering with autocomplete.
  • SQL mode — advanced, flexible querying using a subset of SQL.
Results can be viewed across multiple visualizations, including Timeseries, Table, Top List, Pie Chart, and Tree Map.

​
Selecting a Mode

Use the search bar at the top of the page to enter queries. On the right-hand side of the search bar you’ll find a mode toggle button:
  • Simple Mode (default): Autocomplete suggestions and styling are enabled.
  • SQL Mode: Autocomplete and styling are disabled; queries must be written manually.
⚠️ Switching Between Modes
  • From Simple → SQL: Your query is automatically converted into SQL syntax.
  • From SQL → Simple: Queries cannot be automatically converted back to Simple syntax. To return to Simple mode, you must clear the query.

​
Simple Mode

Simple mode is designed for quick filtering and exploration:
  • When you click into the search bar, an interactive dropdown shows available keys and values from your log data.
  • Autocomplete makes it easy to build queries without memorizing field names or values.
  • Queries use a key:value style syntax.
Learn more about Simple Mode →

​
SQL Mode

SQL mode gives you more control over complex queries:
  • Queries can be written using a subset of SQL.
  • Expressions include comparisons, logical operators, and pattern matching.
  • No autocomplete or styling is applied, so you must type queries directly.
Learn more about SQL Mode →

​
Limits & Restrictions

All queries in Bronto are subject to the following limits:
  • Maximum length: 16,000 characters
  • Maximum expressions: 400 (includes boolean expressions, comparisons, and standalone tokens)