DataPrime query assistance
Describe what you're looking for in everyday language, and Olly converts your description into a structured DataPrime query — saving you the trouble of writing complex queries manually.
DataPrime query assistance is one of the Olly mini features — focused, in-context AI actions embedded across Coralogix.
DataPrime query assistance in New Explore is in early access. It's rolling out to opted-in workspaces and may change before general availability. Contact Coralogix Support to enable it for your workspace.
How it works
DataPrime Query Assistance uses a large language model (LLM) to interpret natural language requests and generate precise DataPrime queries.
- Natural language to structured queries — Enter your request in plain English, and Olly generates a DataPrime query
- Flexible query modification — After the query is generated, review and adjust it in the DataPrime editor before running it
- Smart input evaluation — Olly detects and corrects spelling mistakes, prevents syntax errors, and validates that input is within DataPrime scope. Invalid input is automatically rejected.
LLM-based systems are still evolving and can make mistakes. Validate any generated DataPrime query before running it.
Limitations
- DataPrime query assistance supports single-turn interaction only — one prompt and one generated query per session.
- Maximum prompt length is 700 characters.
Query examples
Common queries with example prompts and generated DataPrime output:
Simple field-based filter
Prompt: Show me all logs with application name default
source logs
| filter $l.applicationname == 'default'
Multiple filters
Prompt: Show me all logs with severity error or higher where the subsystem name is archive
source logs
| filter $m.severity >= ERROR
| filter $l.subsystemname == 'archive'
Aggregation
Prompt: Count all errors by application name
source logs
| filter $m.severity == ERROR
| groupby $l.applicationname aggregate count() as error_count
Aggregation and filtering
Prompt: Show me all logs where the cloud provider is aws and group it by subsystem
source logs
| filter $d.resource.attributes['cloud.provider'] == 'aws'
| groupby $l.subsystemname
Advanced calculation
Prompt: Find the average grpc.timems where grpc code is not ok
source logs
| filter $d.grpc.code != 'ok'
| groupby true aggregate avg($d.grpc.timems) as average_grpc_times
Due to DataPrime limitations, aggregate functions (sum, avg, count, etc.) require a computation anchor. The groupby true aggregate expression serves as a boolean anchor for the aggregate function.
Prerequisites
Olly must be enabled for your team. See Enable Olly.
Enable DataPrime Query Assistance
- Verify that you have permission to manage AI settings.
- Go to Settings, then Account Preferences.
- Under AI-Powered Capabilities, turn on the DataPrime Query Assistance toggle.
Use DataPrime query assistance
- In Explore, select the dataset you want to query, then switch the query syntax to DataPrime.
- The AI query prompt appears above the DataPrime editor. If it's hidden, open the query builder's actions menu and select Show Prompt AI.
- In the prompt box (Ask Olly to write a query…), describe what you're looking for, then select Generate query or press Enter. Olly generates a DataPrime query for the dataset you selected — logs, spans, or any other dataset you query in Explore.
- Review the generated query and adjust it in the DataPrime editor if needed, then run the query. If your request implies a time range — for example, "errors in the last 3 hours" — Olly sets the time picker to that window when you run the query.
To hide the prompt again, open the query builder's actions menu and select Hide Prompt AI.
Feedback
Rate Olly's responses with a thumbs up or thumbs down to help improve query generation quality.
- Select thumbs up if the generated query is accurate
- Select thumbs down and complete the feedback form to report issues or suggest improvements
Next steps
Get clear, natural language explanations for individual log entries with Explain Log.
