Search /

Initializing search

Coralogix.com

Home

Coralogix Docs

Search /

Home
Home
- Home
User Guides
User Guides
- User Guides
- What's New
  What's New
- Getting Started
  Getting Started
  - Get Started with Coralogix
  - Coralogix Features Tour
  - Packages and Extensions
    Packages and Extensions
    Integration Packages
    Quick-Start Extensions
- Data Flow
  Data Flow
  - Forwarders
  - S3 Archive
    S3 Archive
    Connect S3 Archive
    Archive Retention Policy
  - Pipeline Analyzer
- Data Layer
  Data Layer
  - Dataspaces
  - Datasets
  - Data Processing, Transformation, and Routing
  - The Default Dataspace
  - The System Dataspace
    The System Dataspace
    aaa.audit_events
    alerts.history
    engine.queries
    engine.schema_fields
    labs.limit_violations
    notification.deliveries
    notification.requests
  - Dataset Management
    Dataset Management
    Access Control
  - Schema Management
    Schema Management
    Schema Explorer
    Reserved Fields
- Explore
  Explore
  - Select a Data Source
  - Search
  - Query Builder
  - Fields
  - Tabs, Views, and Queries
  - Explore Actions
  - Query with DataPrime
  - Explore Logs
    Explore Logs
    Visualize Logs
    Logs Grid
    Log Details Panel
  - Log Templates
  - LiveTail
  - Explore Traces
    Explore Traces
    Understating Traces and Spans
    Tracing in Explore Screen
    Highlights for Tracing
    Trace Drilldown
    Trace Drilldown
    Visualize Spans and Traces
    Span Fields and Attributes
    Span Related Data
    Headers and Quick Actions
    Exploring Async Trace Calls with OTEL Link
  - Explore Metrics
    Explore Metrics
    Browse metric labels and values
  - Visual Explorer
    Visual Explorer
    Tabs
- Data Transformation
  Data Transformation
  - Data Enrichment
    Data Enrichment
    Unified Threat Intelligence
    Geo Enrichment
    AWS Resource Enrichment
    Custom Enrichment
    Lookup Tables
  - Parsing
    Parsing
    Log Parsing Rules
    Parsing Rule Types
    Rules Cheat Sheet
    Auto JSON Parsing
    JSON Stringify
    Parse JSON Field
  - Log Normalization
  - Dynamic Blocking
- Data Query
  Data Query
  - Archive Query
    Archive Query
    Access CX-Data Directly
    Archive Query from the Explore Screen
    Import Archived Logs
  - Background Queries
    Background Queries
    Save Results as Datasets
  - Log Query
    Log Query
    Log Query - Simply Retrieve Your Data
    Cross-Team Query
    Querying Coralogix with SQL
  - Relational Queries
  - Highlights
    Highlights
    Tracing
    RUM
- Monitoring and Insights
  Monitoring and Insights
  - Synthetic Monitoring
    Synthetic Monitoring
    Synthetic Monitoring with Checkly
    Synthetic Monitoring With Telegraf
  - Setting Up Your Lambda Function Metrics Dashboard
  - Mapping Statistics
  - Version Benchmarks
- Continuous Profiling
  Continuous Profiling
- Fleet Management
  Fleet Management
- SLO
  SLO
- APM
  APM
  - Getting Started
    Getting Started
    APM Onboarding
    Span Metrics
    Span Metrics
    Quick Start
    Recommended Configurations
    Cardinality Limiting
    Using Compact Span Metric
    Migration from Event2Metrics to Span Metrics
    Aligning Coralogix and OTel Naming Conventions
  - Features
    Features
    Service Catalog
    Service Catalog
    Service Health
    Service Health
    Alert-Based Service Health
    Policy-Based Service Health
    Profiles Catalog
    Service SLOs
    Analyze
    API Error Tracking
    Transactions
    Dependencies
    Dependencies
    View Database Queries
    View External Calls
    Apdex Score
    Group by Service Version
    Service Map
    Serverless Monitoring
    Database Monitoring
    Environment Filter
    Monitoring with Alerts
    Comparison Mode
- RUM
  RUM
  - Getting Started
    Getting Started
    Real User Monitoring
    RUM Integration Package
  - SDK Installation
    SDK Installation
    Overview
    Android
    Apple
    Apple
    iOS
    tvOS
    JavaScript
    JavaScript
    CDN Browser SDK Installation Guide
    NPM Browser SDK Installation Guide
    Next.js
    SvelteKit
    Flutter
    Flutter
    Mobile
    Web
    React Native
    React Native
    React Native Plugin
    React Native SDK
  - SDK Features
    SDK Features
    Trace Exporter
    Anonymous Users
    Analyzing Header and Payload Data
    Web Worker Support
    Custom Logs
    Micro Frontend Error Tracking
    Measuring Memory Usage
    Trace Capturing
    Custom Spans
    Enhance & Manage Browser RUM Data with beforeSend
    DOM Navigation Indications
    RUM Conditional Error Sampling
    Customized Timing
    Configure Your Browser RUM Data Proxy
    Custom Measurements
    Label Provider
    Intercept & Control RUM Events with URL Blueprinting
    Data Privacy and Logging Settings
    Ignore Errors
    Capturing Errors
    Source Maps: JavaScript
    Source Maps: React Native
  - Product Features
    Product Features
    Error Tracking with Olly Mini
    Measurements
    Monitoring RUM Network Call Performance
    User Measurements
    User Action and Error Screenshots
    RUM Saved Views
    Session Replay
    Session Replay
    Web
    iOS
    Flutter
    Android
    React Native
    Error Tracking
    Error Tracking: User Manual
    Error Template View
    Error Analytics
    User Sessions
    Core Web Vitals
    Mobile Performance
    Versions
  - CLI
    CLI
    RUM CLI
    Uploading Debug Symbols: iOS
  - Querying RUM Logs
- Infrastructure
  Infrastructure
  - Infrastructure Explorer
    Infrastructure Explorer
    Infrastructure Explorer
    Kubernetes Dashboard vs Infrastructure Explorer
    Getting Started
    Getting Started
    Kubernetes
    Kubernetes
    Set Up with Minikube
    Deploy OpenTelemetry Demo App
    Getting Started with Kubernetes Monitoring
    Kubernetes Enrichment Options
    Host
    Host
    Getting Started with Host Monitoring
    Host Data Enrichments
    Configure Applications to Send Telemetry
    Explore Your Infrastructure
    Explore Your Infrastructure
    Search and filter resources with Lucene Builder
    Health overview
    Health Policy
    Ownership
    Compare Infrastructure Configuration Changes
    Data Management
    Data Management
    Data Usage
    Data Limits
    Permissions
    FAQs
- Olly AI Observability Agent
  Olly AI Observability Agent
  - Enable Olly
  - Permissions
- AI Observability & Guardrails
  AI Observability & Guardrails
  - Getting Started
  - Integrations for LLM Observability
  - Monitor
    Monitor
    Monitor Your Applications
    AI Explorer
  - Guardrails
    Guardrails
    Getting Started
    Prebuilt Policies
    Prebuilt Policies
    Prompt Injection
    PII
    Toxicity
    Custom Guardrail Policies
    Guard API
  - Evaluations
    Evaluations
    Prebuilt Evaluation Policies
    Custom Evaluation Policies
  - Code Agents Observability
  - AI SPM
  - Pricing
  - Permissions
  - Classic ML Observability
- MCP Server
  MCP Server
  - Setup
  - OAuth
  - Tools
    Tools
    Overview
    Logs and Traces
    Metrics
    Real User Monitoring
    Reference
    Alerts
    Parsing Rules
    IaC Generation
  - Permissions
  - Limitation
- Cora AI
  Cora AI
- Alerting
  Alerting
  - Introduction to alerts
  - Create Alerts
    Create Alerts
    Configure an Alert Definition
    Configure an Alert Definition
    Metrics-based Query
    Alert Types
    Alert Types
    Logs
    Logs
    Anomaly Detection Alerts
    Dataset alerts
    Immediate Notifications
    New value alerts
    Ratio Alerts
    Threshold Alerts
    Time Relative Alerts
    Unique Count Alerts
    Metrics
    Metrics
    Anomaly detection alerts
    Custom Webhooks: Metric Alerts
    Threshold Alerts
    Traces
    Traces
    Tracing Alerts
    Flow Alerts
    Define Alert Details
    Create Alert Conditions
    Log2Metric Alert
  - Manage Alerts
    Manage Alerts
    Alert Definition Management
    Alert Definition Management
    No-Data Handling for Alerts
    Alert Suppression Rules
    Alert Aggregation
  - Advanced Configuration
    Advanced Configuration
    Custom Evaluation Delay
    Customizing Anomaly Detection Alert Sensitivity
    Lucene Query Builder
    Lucene Query Builder
    Alert Query Behavior
  - Notifications
    Notifications
    Notification Settings
    Alerts as a Notification Source Type
    Outbound Webhooks
    Outbound Webhooks
    Configure Alert Notifications for Outbound Webhooks
    Send Log Outbound Webhooks
    Email Group Outbound Webhooks
    Generic Outbound Webhooks (Alert Webhooks)
    Create Alerting Email Templates with Coralogix
    Alert Webhook with GCP Chat
    Slack Outbound Webhooks
    Jira Outbound Webhooks
    Opsgenie Outbound Webhooks
    Alert Webhook with VictorOps
    Microsoft Teams Outbound Webhooks
    PagerDuty Outbound Webhooks
    Workflow-based Microsoft Teams Outbound Webhooks
    AWS EventBridge Outbound Webhook
    Zenduty
  - Monitor and Respond
    Monitor and Respond
    Alert Drill-Down View
    Alerts Map
    Incidents
    Coralogix Reporter
- Cases
  Cases
  - Cases
  - Cases vs Incidents
  - Set Up Cases
  - Working with Cases
  - Settings and Integrations
    Settings and Integrations
    Case Settings
    Cases ServiceNow Integration
- Visualizations
  Visualizations
- Custom Dashboards
  Custom Dashboards
- Investigations
  Investigations
- Notification Center
  Notification Center
  - Overview
  - Quick Start
  - Concepts
    Concepts
    Entity Types
    Notification Concepts
  - Routing
    Routing
    Alert Routing Labels
    Create a Router
    Define Routing Rule
    Condition Templating
  - Connectors and Destinations
    Connectors and Destinations
    Connectors
    Destination Types
    Destination Types
    HTTPS
    HTTPS
    Connector configuration
    Message configuration
    OpsGenie and JSM configuration via HTTPS
    incident.io configuration via HTTPS
    PagerDuty
    PagerDuty
    Connector configuration
    Message configuration
    Slack
    Slack
    Connector configuration
    Message configuration
    Email
    Email
    Connector configuration
    Message configuration
    ServiceNow
  - Message Customization
    Message Customization
    Presets
    Presets
    Message rendering
    Preset creation
    Dynamic Templating
    Dynamic Templating
    Tera syntax
    Tera usage
  - User Scenarios
    User Scenarios
    Slack routing
    PagerDuty routing
  - Permissions
- Security
  Security
  - Security Data Sources
    Security Data Sources
    Okta Contextual Logs
    PingSafe
    Cloudflare Data Ingestion
    FortiGate
  - Cloud Security Posture Management (CSPM)
    Cloud Security Posture Management (CSPM)
    Downloading Your Security Report
    GCP Security Posture Management (CSPM)
    AWS Cloud Security Posture Management (CSPM)
    Azure Cloud Security Posture Management (CSPM)
- Metrics
  Metrics
  - Metric Usage Analysis
    Metric Usage Analysis
    Variations
    Labels
    Explore Tab
  - Query Usage Analysis
    Query Usage Analysis
    Live Error Logs
  - Query drilldown
  - Metrics Cost Optimizer
  - Optimize Metrics Costs in Coralogix by Adjusting Your Scrape Interval
  - Recording Rules
  - Metrics API
  - Events2Metrics
- Account Management
  Account Management
  - Access Control
    Access Control
    Permissions
    Permissions
    Permissions List
    Policies
    Scopes
  - Account Settings
    Account Settings
    Application and Subsystem Names
    Coralogix Domain
    General Settings
    IP Access Control
    Notifications Preferences
    Session Length
    Team ID
  - API Keys
    API Keys
    API Keys
    Send-Your-Data API Key
  - Fair Usage
    Fair Usage
    Ingestion & Query Limits
    Metrics
    Infrastructure
  - Organization Management
    Organization Management
    Organizational Grouping
    Create an Organization
    Manage Admins
    Quota Manager
    Organization Settings
  - Payment and Billing
    Payment and Billing
    Data Usage Metrics
    Plan and Payments Management
    Pay-as-you-go
    Quota Management
    Quota Rules
    Data Usage
  - TCO Optimizer
  - User Management
    User Management
    Teams
    Teams
    Create Teams
    Manage Teams
    Manage Team Members
    Groups
    Groups
    Create and Manage Groups
    Secure Login
    Secure Login
    OAuth 2.1
    MFA
    SSO
    SCIM
    Multi-SAML for SSO
- Troubleshooting
  Troubleshooting
  - Coralogix Audit
  - Troubleshoot Data Collection with Coralogix
- Data Privacy
  Data Privacy
  - Handling PII and Sensitive Data
DataPrime
DataPrime
- DataPrime
- Welcome to DataPrime
- User guide
  User guide
- Cookbook
  Cookbook
  - ⏱️ Working with time
    ⏱️ Working with time
    Parsing date strings
    Create variables for timestamp calculations
    Convert a timestamp
  - 🔍 Filtering & searching
    🔍 Filtering & searching
    metadata vs. data field
    Fuzzy search all fields
    Accessing fields with special characters
  - 📊 Counting & aggregation patterns
    📊 Counting & aggregation patterns
    Count and sort events
    Conditionally count logs
    Find peak traffic
  - 🧱 Infrastructure use cases
    🧱 Infrastructure use cases
    Count k8s container restarts
    Summarize container restarts
  - ⚙️ Application-level use cases
    ⚙️ Application-level use cases
    Bucket longtask durations into performance ranges
    Calculate Lambda function invocation duration
  - 🔌 System dataset use cases
    🔌 System dataset use cases
    Count schema changes over time
    Audit schema field types and values by dataset
    Monitor dataset schema changes for compliance
    Count queries using joins by team
    Group failed queries by failure type
    Find heavy DataPrime queries
- API
  API
- Language reference
  Language reference
  - Types
  - Access mechanisms
  - Limitations
  - Commands reference
    Commands reference
    Sources
    Sources
    source
    Time
    Time
    around
    between
    last
    timeshifted
    aggregate
    block
    bottom
    choose
    convert
    count
    countby
    create
    dedupeby
    distinct
    enrich
    explode
    extract
    filter
    find / text
    groupby
    multigroupby
    join
    limit
    lucene
    move
    orderby / sortby
    redact
    remove
    replace
    stitch
    top
    union
    wildfind / wildtext
  - Functions reference
    Functions reference
    Aggregration
    Aggregration
    any_value
    approx_count_distinct
    avg
    collect
    count_if
    distinct_count_if
    distinct_count
    max
    max_by
    min
    min_by
    percentile
    sample_stddev
    sample_variance
    stddev
    sum
    variance
    Array
    Array
    arrayAppend
    arrayConcat
    arrayContains
    arrayInsertAt
    arrayJoin
    arrayLength
    arrayRemove
    arrayRemoveAt
    arrayReplaceAll
    arrayReplaceAt
    arraySort
    arraySplit
    cardinality
    inArray
    isEmpty
    isSubset
    isSuperset
    setDiff
    setDiffSymmetric
    setEqualsTo
    setIntersection
    setUnion
    Case
    Case
    case
    case_contains
    case_equals
    case_greaterthan
    case_lessthan
    General
    General
    firstNonNull
    if
    in
    recordLocation
    IP
    IP
    ipInSubnet
    ipPrefix
    Number
    Number
    abs
    ceil
    e
    floor
    fromBase
    ln
    log
    log2
    mod
    pi
    power
    random
    randomInt
    round
    sqrt
    toBase
    String
    String
    byteLength
    chr
    codepoint
    concat
    contains
    decodeBase64
    encodeBase64
    endsWith
    indexOf
    length
    ltrim
    matches
    pad
    padLeft
    padRight
    regexpSplitParts
    rtrim
    splitParts
    startsWith
    substr
    textSearch
    toLowerCase
    toUpperCase
    trim
    Time
    Time
    Specifying timestamp formats
    addInterval
    addTime
    diffTime
    extractTime
    formatInterval
    formatTimestamp
    fromUnixTime
    multiplyInterval
    now
    parseInterval
    parseTimestamp
    parseToTimestamp
    roundInterval
    roundTime
    subtractInterval
    subtractTime
    timeRound
    toInterval
    toIso8601DateTime
    toUnixTime
    URL
    URL
    urlDecode
    urlEncode
    UUID
    UUID
    isUuid
    randomUuid
    uuid
Integrations
Integrations
OpenTelemetry
OpenTelemetry
- OpenTelemetry
- Getting Started
- Standalone Installation
  Standalone Installation
  - Getting Started
  - Advanced Configuration
    Advanced Configuration
    Linux
    macOS
    Windows
    Docker
  - Kubernetes Observability using OpenTelemetry
  - Host Observability
  - Running OpenTelemetry as a CLI Application
  - APM using OpenTelemetry Collector with Kubernetes
  - APM using OpenTelemetry as a Unified Shipper with Kubernetes
  - Collect Kubernetes Events using OpenTelemetry
  - OpenTelemetry ECS Fargate
- Configuration Options
  Configuration Options
- Instrumentation Options
  Instrumentation Options
- Kubernetes Observability
  Kubernetes Observability
- AWS ECS-EC2
  AWS ECS-EC2
  - AWS ECS-EC2 OpenTelemetry Integration
- Monitoring
  Monitoring
  - Monitoring Windows Server using OTel & Prometheus
- Tail Sampling
  Tail Sampling
- OpenTelemetry Workshops
Developer Portal
Developer Portal
- Developer Portal
- APIs
  APIs
  - Getting Started
    Getting Started
    Getting Started With Coralogix APIs
    Platform as a Service (PaaS)
    Limitations
  - Data Management
    Data Management
    Alerts API
    Alerts API
    Alerts API v1/v2
    Alerts API v3
    Migrating from Alerts v2 to v3
    SLO Management API
    Alert Suppression Rules API
    Metrics Cardinality API
    Metrics Cost Optimizer API
    Metric Usage API
    Insights API
    Parsing Rules API
    Custom Enrichment API
    Service Retention Period gRPC API
  - TCO Controls
    TCO Controls
    TCO Optimizer HTTP API
  - Log Ingestion
    Log Ingestion
    Coralogix REST API
    Coralogix REST API /singles
  - Version Tags
    Version Tags
    GitHub Version Tags
    cURL Version Tags
    Spinnaker Version Tags
    GitLab Version Tags
    Microsoft Azure DevOps Server Version Tags
    Argo CD Version Tags
    Bitbucket Version Tags
  - Grafana
    Grafana
    Hosted Grafana API
- Infrastructure as Code
  Infrastructure as Code
  - CLI
    CLI
    Coralogix CLI
    Team Management (via CLI)
    SAML Management (via CLI)
  - Terraform Provider
    Terraform Provider
    Coralogix Terraform Provider
    Integrations
    Integrations
    AWS Metrics from CloudWatch
    Azure Metrics
    CrowdStrike
    GCP Logs
    GCP Metrics
    GCP Resources
    GCP Traces
    GitHub Enterprise
    Google Workspace Alert Center
    Google Workspace
    Google Workspace Users
    Microsoft 365
    Okta Users
    Salesforce
    SentinelOne
    Wiz
  - Terraform Integrations
    Terraform Integrations
    AWS
    AWS
    CloudWatch
    Kafka
    Kinesis
    MSK
    S3
    SNS
    SQS
  - Coralogix OpenAPI
  - Coralogix Operator
    Coralogix Operator
    Coralogix Operator
    Coralogix Operator Helm Chart
    Coralogix Operator Metrics
    Prometheus Integration
    CXO Observer
    API Reference