As we filter the event stream with searches, new logs still appear in realtime. This has been handy when we're trying to reproduce problems. We're not forced to choose between older search results or live logs. We get both.
Exclusion searches like
-noise made it fast for us to filter
out routine events. Papertrail's alerts email us when something else – by
definition, an unusual event – occurs.