Display timestamp and color dot by default in kubetail logs response

[amorey]

Currently when you fetch logs using kubetail, the default response is just the raw log messages:

This works ok and I think it's the expected behavior for a user who wants to replace kubectl logs, however what attracts users to Kubetail is the ability to see messages from multiple pods in context. So, I propose to make the default response like this except instead of the pod name we replace it with a color dot like in the web dashboard:

If we do this then we can add flags to hide the timestamp column (--hide-ts), the dot column (--hide-dot) or everything at once except for the raw messages (--raw).

[rxinui]

Perhaps by default, a log should not embed the IP nor the TS resulting to something like (GET /...). That could be the raw log version. From there, we could build up formatted log with --with-ts --with-ip --no-headers to replicate the first image. And, as for the second image, we could do --with-ts --with-pod --with-ip

[amorey]

Everything under "MESSAGE" is from the container's raw log message so hiding the IP and the HTTP TS would be great but it would require parsing the message itself (which we should enable as well but that's a separate issue). Think of the event like this:

{
  "timestamp": "2025-09-29T11:03:47.229919156Z",
  "pod": "loggen-ansi-65b7c4d87d-774gm",
  "message": "123.25.44.6 - - [29/09/2025:11:03:47] \"GET / HTTP/1.1\" 200 162 \"-\" \"curl/8.4.0\""
}

The timestamp is metadata recorded by the container runtime when it receives a message and pod comes from kubernetes metadata that we insert at fetch time.

So what I'm thinking is that currently the default response from kubetail logs is basically the same as the response from kubectl logs and users might prefer the default to be something with more context-aware metadata such as [TIMESTAMP] [DOT] [MESSAGE]. For example, something like this:

What do you think?