Logs in Explore Screen

The Coralogix Explore Screen is a powerful and user-friendly interface designed to provide a comprehensive view of your telemetry data. With its intuitive layout and well-organized presentation, you can effortlessly navigate through data, gaining valuable insights into your system's behavior.

This tutorial walks you through logs monitoring in your Explore Screen.

Overview

Use the Explore Screen to:

Filter and query your telemetry data to pinpoint specific data points
View, filter, and data of all TCO priorities
Correlate logs and traces to identify cause-and-effect relationships, track the flow of events, and recognize how various system components interact
Create new alerts for your data

Query your data

Easily query your logs with our state-of-the-art functionalities.

Select a query syntax language

Build a query in the query bar using Lucene or DataPrime query languages.

Jumpstart your DataPrime queries using the AI Query Assistant. Describe your query in natural language and the system will transform your input into a structured query.

Modify a query

When clicking on a JSON field value, a drop-down menu will open:

In this example, clicking on the option INCLUDE IN QUERY adds the expression ‘_*exists_*: "resource.attributes.k8s.container.name"’ to the query. Choosing the EXCLUDE FROM QUERY option adds the expression ‘NOT_*exists_*: "resource.attributes.k8s.container.name"’ to the query.

You can also copy the complete JSON path to the clipboard, which can help in building query expressions.

Select which logs to query

In the left-hand panel, you can execute a default query of your frequent search (high-priority) logs or query all logs - compliance (low priority), monitoring (medium priority), and frequent search (high priority) logs.

Results displayed

For every query, 15,000 logs are displayed. The logs can be displayed in either ascending or descending order based on the timestamp.

Clear a query

Clicking on the x to the right of the query string deletes the query string but does not affect the rest of the query par

Filter your data

Filter using predefined parameters

In the left-hand sidebar, filter your data by any of the following parameters:

The Filters section shows the count-per-filter value at the side of each filter option. This shows how many results will appear when each filter is applied. It also provides a way to generate a count distribution graph for the filtered key using the graph icon that appears when you hover over a heading.

Filter using keywords

Add filters using keyword fields by clicking ADD FILTER at the top of the filter section or by clicking on a JSON field and selecting ADD TO FILTER LIST in the dropdown menu.

Time selection

Select the time range for your query using the data range dropdown on the upper right-hand side of the browser window.

The default time period is the last 15 minutes. It can be modified and filtered using the following:

Tags: Allow you to search for an application tag and find all logs associated with it
Custom: Choose an absolute date/time range to filter.
Relative: Choose a time window between (current time – t1) and (current time – t2). Intervals are set in hours, minutes, and seconds.
Quick: Select a predefined query interval in one click. Intervals are set in minutes, hours, and days.

Dragging the mouse across a section of the logs flow graph zooms into the previous query time range and sets a new time interval.

Visualizations

Expand log text

If the log is in a view that can be expanded, clicking the arrow ‘>’ icon or double-clicking on the log expands and shows the entire log message.

View surrounding logs

In some cases, you may want to view the logs that occurred before and after a particular log to get additional context to understand the log better.

To view the logs surrounding a specific log:

STEP 1. Hover over the log number and click the three dots that appear.

STEP 2. Click VIEW SURROUNDING LOGS.

STEP 3. Select the time window for which to view the surrounding logs (5 seconds, 30 seconds, 1 minute, 5 minutes, or 10 minutes).

Notes:

When surrounding logs are displayed, the log of interest is highlighted amongst all the results returned.
However, if there are more than 15,000 results, and the timeline's log distribution means your specific log isn't within the first or last 15,000, it won't be highlighted since it's not part of the currently displayed results.

Manage columns

Clicking on the COLUMNS button opens the Manage Columns window. There, fields can be arranged between two lists by dragging them. The APPLY button updates the columns on the logs screen. The Manage Columns window can also be accessed from the SETTINGS menu.

Manage keys

Use our Manage Keys feature to personalize the JSON layout with fields, by clicking the column icon next to the Column header. This opens the Manage Keys box, allowing you to simplify the way you arrange your columns to view data. Select the keys you wish to view, pin and sort them, and save your view. Find out more here.

Improve log visibility

Improve visibility for your log’s most important data using the CONTENT column, which displays selected keys from your logs. Find out more here.

Custom and Saved Views

Custom views help organize specific, relevant log information and views that help other users work and retrieve important data more efficiently. You can also save your custom views for use at a future time. For more information, see Explore Screen - Custom Views.

APM service drill-down

Smoothly transition from reviewing logs to exploring the service responsible for generating them in the APM service drill-down.

Within the service drill-down, you'll find a concise overview of the service and its associated metrics.

To access this feature, hover over the row number corresponding to the log you're interested in. Then, click the ellipsis that appears and choose APM SERVICE DRILL-DOWN from the drop-down menu.

We recommend that your subsystem name reflect the service or application producing your logs, metrics, and traces. Without this naming, you will be rerouted to the Service Catalog page.

Additional resources

Documentation

Manage Keys
Content Column
Custom Views

Support

Need help?

Our world-class customer success team is available 24/7 to walk you through your setup and answer any questions that may come up.

Contact us via our in-app chat or by emailing [email protected].

Manage Keys

Next Logs Screen