Concepts & glossary

Concepts & glossary

Short definitions of the terms that show up across these docs and the product.

Investigation

Any AI-driven analysis or search run: a Quick Search, a Deep Research investigation, or a Delta comparison. Investigations are what draw down your quota. See the investigation unit, below.

Investigation unit

How logcat.ai meters AI usage. One unit is one Deep Research. A Quick Search is 0.1, a comparison is more. Your account gets a monthly budget of units. See Investigation units & quotas.

A single-pass, natural-language lookup that returns a direct answer with cited log lines in a few seconds. Best for triage and known symptoms. See Quick Search.

Deep Research

A multi-step investigation that plans an approach, forms and tests hypotheses, correlates across layers, and produces a citation-backed root-cause report. Best for the hard, open-ended cases. See Deep Research.

Delta

A comparison across separate files (a working capture vs a failing one, or one build against another) to isolate what changed. Distinct from a bundle, which composes related files into one picture. See Delta Comparison.

Subsystem analyzers

Each examines one facet of a log (application, CPU, memory, network, power, security, storage, system services, timeline, system health). Their findings appear on the dashboard, and your questions are answered against them. See Analysis output & dashboards.

How file types are analyzed

  • Text logs (logcat, dmesg, syslog, telecom modem text): ask a question in plain English and get an answer with the log lines cited.
  • Structured captures (pcap, Perfetto traces, ramdumps, SQLite): search queries the records directly, so you can ask for exact counts, sequences, and relationships.

You don’t choose between them. logcat.ai picks the right one from the format, which is why a pcap and a bugreport get different dashboards and different search behavior.

Bundle

A collection of files that belong together (an OEM megadump, a mixed archive, a Qualcomm ramdump) uploaded as one unit. The platform unpacks the archive, analyzes each child, correlates across them, and gives each analyzable child its own dashboard plus a bundle-level roll-up. See Multi-file bundles.

Dashboard

A per-format view of an analyzed file, with charts, an event timeline, and the findings. A file reads as completed once its results are ready to open. See Analysis output & dashboards.

References library

A store of decode artifacts scoped to your account: kernel symbols (vmlinux) and CAN signal databases (DBC). Uploading a matching vmlinux lets a kernel ramdump be analyzed with symbols; registering a DBC decodes CAN traces against it. See Kernel ramdumps & References.

Insights

Cross-file findings that roll up to the bundle level: patterns no single file’s dashboard would surface on its own, like the same identifier failing across several logs.