Support

Need help? Have feedback?

support@fallingdata.zone

Getting Started

Open any log file by dragging it onto the Timber window or dock icon, or use File > Open. Timber auto-detects JSON Lines, logfmt, syslog, Apache, and plain text formats. No configuration needed.

Frequently Asked Questions

What file formats does Timber support?

Timber auto-detects and parses JSON Lines (.jsonl), logfmt, syslog (RFC 3164 & 5424), Apache/nginx combined format, and plain text. It also opens iOS/macOS crash reports (.ips and .crash) and gzip-compressed files (.gz).

How large a file can Timber handle?

Timber uses memory-mapped I/O and can handle files up to 2 GB. For very large files, it uses virtual scrolling so only visible rows are rendered.

Can I search with regular expressions?

Yes. Click the .* button in the toolbar to enable regex mode. Your search text will be interpreted as a regular expression.

How does the SQL query feature work?

Timber loads your log data into an in-memory SQLite database. Open the SQL panel to write queries like SELECT * FROM log_lines WHERE level = 'error' AND message LIKE '%timeout%'. Press Cmd+Enter to execute. Results can be exported to CSV or JSON.

Can I follow a live log file?

Yes. Press Cmd+T or click the Tail button in the toolbar. Timber uses kqueue for low-latency file change detection and will auto-scroll to new entries as they arrive.

How does crash log symbolication work?

Open a .ips crash report and Timber will automatically search for matching dSYM files via Spotlight. You can also drag dSYM files onto the crash view or browse for them manually. Symbolication resolves memory addresses to function names, file paths, and line numbers.

Does Timber require an internet connection?

No. Timber works entirely offline. All parsing, searching, and analysis happens on your Mac. No data ever leaves your device.

How does the trial work?

Timber includes a 14-day free trial with full functionality. After the trial, you can purchase a one-time license to continue using the app. No subscription required.

Can I merge multiple log files?

Yes. Open 2–6 log files in separate tabs, then press Cmd+Shift+M to merge them into a unified chronological timeline. Each source file is color-coded for easy identification.

Can I automate Timber?

Yes. Timber supports the timber:// URL scheme. For example, timber://open?path=/var/log/system.log&tail=true opens a file and starts tailing it. This enables integration with scripts, Alfred workflows, and AI agents.

Keyboard Shortcuts

Cmd+O — Open file
Cmd+W — Close tab
Cmd+T — Toggle tail mode
Cmd+G — Jump to line
Cmd+J — Jump to timestamp
Cmd+C — Copy selection as text
Cmd+Shift+C — Copy selection as JSON
Cmd+Shift+M — Merge open files
Cmd+Shift+] / [ — Next / previous tab
Cmd+Enter — Execute SQL query