The Coralogix Explore Screen is a powerful and user-friendly interface designed to provide a comprehensive view of your telemetry data. With its intuitive layout and well-organized presentation, users can effortlessly navigate through their data, gaining valuable insights into their system’s behavior.
This tutorial walks you through exploring logs in your Explore Screen.
Use the Explore screen to:
In the left-hand sidebar, filter your data by any of the following parameters:
The Filters section shows the count-per-filter value at the side of each filter option. This shows how many results will appear when each filter is applied. It also provides a way to generate a count distribution graph for the filtered key using the graph icon that appears when you hover over a heading.
Add filters using keyword fields by clicking ADD FILTER at the top of the filter section or by clicking on a JSON field and selecting ADD TO FILTER LIST in the dropdown menu.
Select the time range for your query using the data range dropdown on the upper right-hand side of the browser window.
The default time period is the last 15 minutes. It can be modified and filtered using the following:
Dragging the mouse across a section of the logs flow graph zooms into the previous query time range and sets a new time interval.
Easily query your logs with our state-of-the-art functionalities.
In the left-hand panel, you can execute a default query of your frequent search (high-priority) logs or query all logs – compliance (low priority), monitoring (medium priority), and frequent search (high priority) logs.
Query your logs using the “Search logs” entry field with the support of the logs screen dropdown menu that helps you build queries based on the log fields using Lucene or DataPrime query languages.
When clicking on a JSON field value, a drop-down menu will open:
In this example, clicking on the option INCLUDE IN QUERY adds the expression ‘_*exists_*: "resource.attributes.k8s.container.name"
’ to the query. Choosing the EXCLUDE FROM QUERY option adds the expression ‘NOT_*exists_*: "resource.attributes.k8s.container.name"
’ to the query.
You can also copy the complete JSON path to the clipboard, which can help in building query expressions.
For every query, 15,000 logs are displayed. The logs can be displayed in either ascending or descending order based on the timestamp.
Clicking on the x to the right of the query string deletes the query string but does not affect the rest of the query parameters (filters and time window).
There are four tabs to the top left in this section:
On the top right panel, there are five options:
Custom views help organize specific, relevant log information, as well as views that help other users work and retrieve important data more efficiently. You can also save your custom views for use at a future time. For more information, see Explore Screen – Custom Views.
If the log is in a view that can be expanded, clicking the arrow ‘>’ icon or double-clicking on the log expands and shows the entire log message.
In some cases, you may want to view the logs that occurred before and after a particular log to get additional context to better understand the log.
To view the logs surrounding a specific log:
STEP 1. Hover over the log number and click the three dots that appear.
STEP 2. Click VIEW SURROUNDING LOGS.
STEP 3. Select the time window for which to view the surrounding logs (5 seconds, 30 seconds, 1 minute, 5 minutes, or 10 minutes).
Notes:
Clicking on the COLUMNS button opens the Manage Columns window. There, fields can be arranged between two lists by dragging them. The APPLY button updates the columns on the logs screen. The Manage Columns window can also be accessed from the SETTINGS menu.
Use our Manage Keys feature to personalize the JSON layout with fields, by clicking the column icon next to the Column header. This opens the Manage Keys box, allowing you to simplify the way you arrange your columns to view data. Select the keys you wish to view, pin and sort them, and save your view. Find out more here.
Improve visibility for your log’s most important data by using the CONTENT column, which displays selected keys from your logs. Find out more here.
Smoothly transition from reviewing logs to exploring the service responsible for generating them in the APM Service Drill-Down.
Within the Service Drill-Down, you’ll find a concise overview of the service and its associated metrics.
To access this feature, hover over the row number corresponding to the log you’re interested in. Then, click on the ellipsis that appears and choose APM SERVICE DRILL-DOWN from the drop-down menu.
We recommend that your subsystem name reflect the service or application producing your logs, metrics, and traces. Without this naming in place, you will be rerouted to the Service Catalog page.
Documentation | Manage Keys Content Column Custom Views |
Need help?
Our world-class customer success team is available 24/7 to walk you through your setup and answer any questions that may come up.
Contact us via our in-app chat or by emailing [email protected].