View Logs

The Logs Explorer allows you to view the logs emitted by resources in the default workspace.

To view the logs:

1. Navigate to Infrastructure > Logs. The Logs Explorer page is displayed.

   

2. Refer to the table below to perform actions in the Log Explorer:

Callout	Description
1	Click to access the Favorite and Quick Links> section. You can also access saved views under MY LOGS VIEWS page.
2	Filter the logs using LOGQL attributes. You can add multiple queries and filter the logs at the same time. Once you add a query in the Add Filter, the Configure Alerts option is enabled. You can access the Add Log Alert Definition page to add a log alert definition.
3	Filter the logs for a specific period of time. You can filter the maximum of the last 7 days logs and they can be viewed on the dashboard. You can choose the date and time and create a custom query to filter logs produced by a specific service.
4	Displays the log results with time span and count based on the custom query selection.
5	Select the individual logs to display the log details in the side panel. Click the link to navigate to the resource details page if the resource is available and has agent installed.
6	The fields column can be used to filter the logs by selected fields. The user can favorite commonly used fields, as well as view the percentage and raw count of logs using the fields. Displays the top 50 records based on the selected time range. To view additional records, click the Fetch More option.

Use the Live Tail feature

The Live Tail feature in the Logs Explorer allows you to monitor real-time logs as they are generated. The real-time monitoring provides instant visibility into system events and errors, eliminating the need to refresh or manually retrieve data.

Access the Live Tail

1. On the log explorer, click Live Tail.
   This will bring up a Logs screen displaying real-time logs.
2. On the live tail page, click +ADD FILTER to filter the incoming data by selecting the attributes you want to filter by. This allows you to narrow down the logs to those most relevant to your needs.

3. You can also stop or start the real-time logs monitoring.

If you are inactive for more than 5 minutes while using the Live Tail feature, a dialog box will appear stating that your session has expired. You will need to refresh the session to continue monitoring logs in real-time.

Fields

The Fields column in the Logs Explorer page allows users to efficiently filter log results based on commonly used fields. This feature provides insights into the available fields within the log data, displaying both the raw count and percentage of usage for each field.

Key Capabilities:

• Quick Filtering: Easily narrow down log results by selecting relevant fields.
• Usage Insights: View the frequency and percentage of each field to identify commonly occurring attributes.

To filter logs using the fields:

1. Click a field to view the available values for that field.

2. Click the three dots beside a value to access filtering options.
3. Choose to filter logs by either:
   • Matching values (show only logs containing the selected value).
   • Excluding values (hide logs containing the selected value).

4. The filter query will automatically update based on your selection.
5. The below example shows the syntax for excluding a specific value.