Live Error Logs

View real-time error logs for failed query executions directly within the Query Pattern drilldown. The Live error logs tab shows errors in context alongside the query pattern that triggered them, without switching to Explore Logs or searching log datasets manually.

Where it appears

The Live error logs tab is located inside the Query Pattern drilldown view, next to the existing Overview tab.

To access it:

1. Go to Settings, then select Metric Data.
2. Select the Usage Analysis tab, then Queries.
3. Select any query pattern from the list to open the drilldown.
4. Select the Live error logs tab.

The drilldown header displays summary information for the selected query pattern:

• Times used: Total execution count for the selected date
• Last run: Timestamp of the most recent execution
• Status: Success and failure rates shown as percentages with counts (for example, 99.8% (2,198) success, 0.2% (5) failure)
• Location: The source where the query runs (for example, Alerts, Recording Rules, API)

Error logs table

The Live error logs tab displays an Error logs section with a badge showing the total number of errors in the last 7 days.

The table includes the following columns:

• Timestamp: Date and time of the failed query execution (for example, 17/03/2026 08:37:45.536)
• Location: The feature or component where the query ran (for example, Alerts)
• Log: The raw error log entry, including status, error type, and error message in JSON format

Example log entry:

{"status":"error","errorType":"500","error":"An internal error occurred while processing the request"}

Use cases

• Debug failing queries: Identify the root cause of query failures without leaving the Query Analyzer. The error message and timestamp pinpoint when and why a query failed.
• Correlate errors with query patterns: Determine which query patterns produce errors and how frequently using the status breakdown in the drilldown header.
• Investigate alert reliability: When a query pattern runs in Alerts, error logs reveal whether alert evaluations fail silently and need attention.
• Triage by location: The Location column shows where the error originated, helping route the investigation to the right team or feature area.