Skip to main content

48 docs tagged with "data-exploration"

View all tags

Ask Olly about a span or trace

Investigate any span or trace in Explore by asking Olly natural-language questions. Olly carries the trace ID and the selected span as context, so you can start from a suggested query or write your own.

Browse metric labels and values

Browse metrics, labels, and label values without writing PromQL—and generate a starting query to use in Metric Explorer or Custom Dashboards.

Custom actions

Turn values from a log or span into clickable jumps to Coralogix screens, internal tools, dashboards, or third-party services using URL templates with field placeholders.

Deep links and URL parameters

Build deep links that open Explore directly into a specific query, time range, dataset, view, or visualization using human-readable URL parameters.

Explore

Explore is your home base for investigating, troubleshooting, and analyzing your logs and spans.

Explore actions

Share, alert on, save to a dashboard, save as a view, or reset the current Explore configuration from the toolbar in the top-right corner.

Explore common components

Reference index for the four shared components in Explore spans—Result table, Query builder, Graphs, and Fields—across the Spans, Traces, and Flows tabs.

Explore spans

Investigate spans, traces, and service flows side by side in a single Explore page. Move from symptom to root cause without leaving the page.

Explore views, tabs, and queries

Save views, open tabs, and manage queries in Explore to preserve investigations, run parallel queries, and reuse query expressions.

Export data

Download Explore query results — logs, spans, traces, templates, or Overview aggregations — as a CSV, TSV, or JSON file for spreadsheet analysis, downstream tooling, archival, or sharing with teammates outside Coralogix.

Fields for logs

The Fields side bar in Explore logs groups fields into named sections so you can find the right filter quickly, even when a source has hundreds of attributes.

Fields for spans

The Fields side bar in Explore spans groups span fields and tags by OpenTelemetry semantic convention so you can find the right filter quickly.

Filter with fields

Use the Fields panel to discover which fields exist in your current Explore results and to take common actions without manually typing field names into the query.

Follow OTel span links across traces

When a request crosses an async boundary—a message queue, a retry, a background job—it splits into separate traces connected by OTel span links. Follow those links from the Gantt view and the Dependencies view to open the connected trace in a new tab with the linked span already selected.

Get started with explore logs

This quickstart walks you through a complete investigation flow in Explore — from selecting a data source to drilling down into specific log entries. Follow the steps in order to get familiar with the key features.

Get started with Explore spans

Investigate spans and traces in a complete flow—choose a tab, set the time range, filter, aggregate, and drill into a single span.

Grafana plugin

Add Coralogix as an OpenSearch and Prometheus data source in an external Grafana to visualize your Frequent Search logs and query your metrics with PromQL.

Headers and quick actions

In the tracing drilldown view, trace and span headers surface the key context you need to decide what to investigate next-service, operation, status, duration, and percentile (how the duration compares to baseline).

Highlights tab

Break the spans matching your query down by field to spot which services, endpoints, or status codes are driving a spike. Compare to a previous period to confirm whether a shift is new or recurring.

Hosted Grafana view

Visualize your data using Coralogix's Hosted Grafana without having to integrate a personal Grafana instance with your Coralogix account.

Hosted OpenSearch view

Visualize your data using Coralogix’s Hosted OpenSearch without having to integrate your enterprise instance of OpenSearch with your Coralogix account.

Identify uninstrumented services

Some services take part in a request but never send telemetry to Coralogix. The Dependencies Service view still shows them—reconstructed from the spans of instrumented services—so architectural blind spots stay visible. Learn how to recognize an uninstrumented service and what to do about it.

Investigate large and long-running traces

Some traces contain tens of thousands of spans or stretch across days. Learn the limits that apply to large and long-running traces in Explore spans, and the controls—time range picker, Load more spans, Show Surrounding Spans, and CSV export—that keep them explorable.

LiveTail

LiveTail is a real-time pre-index log stream. Use it to watch logs as they arrive, without waiting for ingestion to finish.

Log details panel

The log details panel opens when you select a log entry in the Explore results table. It displays the full record for the selected log, including its fields and related observability data.

Logs table

The logs table is the default results view in Explore. It displays individual log entries as rows, with fields rendered as columns. Use the table to scan results, compare field values across entries, sort by specific columns, and open individual logs for deeper inspection.

Metric explorer

Run PromQL queries, visualize metric trends, and drill down by label dimensions from a dedicated explore workspace without setting up a dashboard.

OpenSearch API

Coralogix provides an OpenSearch API that allows you to query your hosted OpenSearch instances securely and with ease.

Overview tab

Use the Overview tab in Explore to turn any dataset's query results into an aggregated, sortable view — top contributors, distributions, and bar or pie visualizations — driven by the same Group by and Aggregation as the row-level tabs.

Permissions

Required role-based and policy-based permissions for using saved views, team default views, and access policies in Explore.

Query builder

Query Builder turns log and span search into analysis — group, count, and compare across any field directly in Explore. Start by filtering with the search bar, then add Grouped by and Aggregation chips to turn raw data into grouped results. From grouped results, drill down into a specific group and apply your refined selection back to the main view.

Query builder for spans

The Spans and Traces tabs of Explore spans extend the standard query builder with error filters, duration filters, and span-relationship filters.

Root span states and incomplete traces

When the Traces tab can't show a normal Root service name, it displays a placeholder explaining whether the trace has missing or multiple root spans, or is still being ingested. Learn what each indicator means, how Coralogix chooses it, and how to act on each one.

Saved views in Explore

Save Explore views for logs or spans to preserve query, fields, table settings, time range, and folder location, then reload them from All views.

Search logs and spans

Use the Lucene-powered search bar in Explore to find the exact logs and spans you need. Builder mode supports two input styles — a visual chip builder and a Lucene editor — and you can switch to the DataPrime syntax for advanced pipelines. As you search, Explore keeps your query, filters, and UI actions aligned so you can refine results without rebuilding your work.

Select a dataset

Every query in Explore starts with a dataset selection. Selecting the right dataset before running a query improves both the speed and relevance of your results.

Signals tab

The Signals tab in Explore spans surfaces Rate, Errors, and Duration for the active query. Outliers overlays latency percentiles, error counts, and individual span samples on one chart; RED metrics renders Rate, Errors, and Duration as three side-by-side charts.

Span fields and attributes

The Info Panel helps you quickly understand why a request was slow, failed, or behaved unexpectedly. It provides a single, searchable view of all context for the selected span, including metadata, errors, infrastructure, and related attributes, so you can move faster from observation to root cause.

Span related data

When you investigate a slow request or a failing operation, a span on its own rarely tells the full story. Span Related Data brings the most relevant signals—logs, events, profiling, and infrastructure context-into the same drilldown so you can move from something is wrong to here’s why without jumping between tools.

Spans, Traces, and Flows

Explore spans renders results across three tabs—Spans, Traces, and Flows. Learn how each tab presents your query and how to switch between them without losing context.

Tableau plugin

This tutorial provides instructions on using the Coralogix JDBC driver with Tableau.

Tabs

Learn how to organize multiple query visualizations in Visual Explorer using tabs. Tabs let you group related queries and keep exploratory workspaces easy to navigate.

Templates

Use templates to group high-volume logs into recurring patterns so you can quickly identify new, rare, and abnormal errors, reduce noise during investigations, and operationalize error discovery with alerts and automation.

Tracing drilldown

The Tracing Drilldown opens when you select a trace or span in Explore. It brings together visualization, metadata, and correlated telemetry in one view.

Understanding traces and spans

Tracing helps you understand how requests move through your system and why they behave the way they do. It is the starting point for investigating latency, errors, and unexpected behavior across distributed services.

Visual Explorer

Visual Explorer is a powerful tool that integrates a multifunctional Explore display with customizable dashboard widgets, enhancing your log, span and metrics exploration. It provides a fast and easy way to add query-based graphs without the need for setting up custom dashboards.

Visualize spans and traces

Open a trace of interest in Explore spans to view its underlying spans. Select your preferred visualization mode — Dependencies, Gantt, or Flame view — to explore varied views of the span data.