source - Read your data
The source
command is a foundational component of DataPrime. It informs the DataPrime engine which datasource you wish to read from.
NOTE: While you can start your query with this, the source
command is optional and will default to logs
.
Syntax
Basic usage
There are three options for reading data in DataPrime:
logs
- Data that has been ingested into Coralogix as a log. This is the default value.spans
- Data that has been ingested into Coralogix as a span, which is part of a trace.- A custom enrichment table, which has been declared via the API or the UI.
Key examples
To inform dataprime you wish to perform your query on logs:
To inform dataprime you wish to perform your query on spans / traces:
To inform dataprime you wish to perform your query on a custom enrichment you have uploaded via the Coralogix UI or API.
Try it yourself
Enter the following into your explore screen:
You will see that it will pull all logs from the timeframe specified in the UI. The following command, however:
Will pull all traces, and not logs.
Theme
Light