Copy as Markdown[Open in ChatGPT](https://chatgpt.com/?q=Read%20https%3A%2F%2Fcoralogix.com%2Fdocs%2Fdataprime%2Flanguage-reference%2Fcommands-reference%2Fsources%2Fsource.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)[Open in Claude](https://claude.ai/new?q=Read%20https%3A%2F%2Fcoralogix.com%2Fdocs%2Fdataprime%2Flanguage-reference%2Fcommands-reference%2Fsources%2Fsource.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)

# `source`

## Description

The `source` command is a foundational component of DataPrime. It informs the DataPrime engine which datasource you wish to read from.

Note

While you can start your query with this, the `source` command is optional and will default to `logs`.

### Basic usage

In DataPrime, you read data by specifying a **dataset** within an optional **dataspace**:

```
source <dataspace>/<dataset>
```

If no dataspace is provided, the query defaults to the `default` dataspace. This allows for concise syntax when working within the most common data sources.

Common datasets include:

* `logs` – Application and infrastructure logs.

*Default dataset. Equivalent to \`source default/logs\`.*

* `spans` – Distributed tracing data from systems like OpenTelemetry.

*Equivalent to \`source default/spans\`.*

* `enrichments/<name>` – [custom enrichment](https://coralogix.com/docs/docs/user-guides/enrichment_rules/custom_enrichment/.md) tables uploaded via the UI or API.

*For example: \`source default/enrichments/ip\_lookup\`*

You can also query system-generated datasets such as:

* `system/engine.queries` – Logs of all DataPrime query executions.
* `system/alerts.history` – Historical records of alert events.

\> Dataset names may include dots (e.g., `engine.queries`) but are still treated as flat identifiers—not nested structures.

This structure supports querying across teams, environments, or pipelines—whether you’re debugging logs, analyzing performance, or auditing notifications.

## Syntax

```
(source|from) <data_store>
```

## Example 1

Query logs from the **default** dataspace:

### Example query

```
source logs

// or

source default/logs
```

## Example 2

Query spans from the default dataspace.

### Example query

```
source spans
```

## Example 3

Query system generated data such as `engine.query` logs/

### Example query

```
source system/engine.queries
```