Logs table

The logs table is the default results view in Explore. It displays individual log entries as rows, with fields rendered as columns. Use the table to scan results, compare field values across entries, sort by specific columns, and open individual logs for deeper inspection.

Configure content column fields

The content column is the primary display column for each log entry. It shows the log message or a subset of key-value pairs depending on your configuration.

To configure which fields appear in the content column:

1. Select Manage columns in the table header.
2. In the column management panel, find the Content section.
3. Add or remove fields to control what appears in each row's content cell.

Changes apply immediately to all rows in the table.

Manage columns

Add, remove, reorder, and reset columns to customize what information appears in the table.

Add columns from column management

1. Select Manage columns in the table header.
2. Search for a field by name, or browse the list.
3. Select the field to add it as a column.
4. Drag the field to reorder it in the column list.
5. Select Apply or close the panel to save changes.

Add a column from a log entry

You can also add a column directly from an individual log entry without opening the column management panel:

1. Select a log row to open the log details panel.
2. Find the field you want to add as a column.
3. Open the field's context menu (three dots or hover actions).
4. Select Add as column.

The column appears immediately in the table.

Reset column layout

To restore the default column configuration:

1. Select Manage columns.
2. Select Reset to default.

This removes any custom columns and restores the original layout.

Sort or remove columns

• Sort: Select a column header to sort by that column. Select again to reverse the sort order. An indicator shows the active sort column and direction.
• Remove: Hover over a column header and select the remove icon, or open Manage columns and deselect the field.

Change row format

The logs table supports different row display formats to match your workflow:

• Compact: Shows one line per log entry. Use this to scan high volumes of results quickly.
• Expanded: Shows multiple lines per entry to display more of the log message. Use this when log messages are long and you need to read more without opening the details panel.

Toggle the row format using the display options control in the table header.

Export logs

Export the current results to a file for offline analysis or sharing:

1. Select Export in the table header or Explore actions menu.
2. Choose the export format (for example, CSV or JSON).
3. Confirm the export.

The export includes the logs matching your current query and time range, up to the supported export limit.

Log row actions

Each log row supports a set of quick actions available on hover or right-click:

• Open details: Opens the log details panel for the selected entry.
• Copy log: Copies the full log entry to the clipboard.
• Include in query: Adds the log's key fields as filters to narrow results to similar logs.
• Exclude from query: Adds the log's key fields as exclusion filters to remove similar logs from results.

Fields sidebar actions

Actions available from the Fields sidebar apply to the table view and modify the query or column layout.

Show the graph for the key

The chart appears above the results table. Each bar segment represents a distinct value for the selected field. Select any segment to drill down into the underlying logs or filter the value in or out of your query.

This action is equivalent to adding the field as a Group by with a Count aggregation and visualizing the result as a stacked bar chart.

Add as Grouping

Select Add as Grouping from the Fields sidebar context menu to add the field to the Group by clause in the Query Builder. The table switches from individual log rows to aggregated groups, showing each unique value and its count.

Key-value context menu

Right-click any key-value pair in the log table or log details panel to access field-level actions:

Action	Description
Filter for value	Adds the field-value pair as an inclusion filter in the query
Filter out value	Adds the field-value pair as an exclusion filter in the query
Add as column	Adds the field as a column in the logs table
Copy value	Copies the field value to the clipboard
Copy key	Copies the field name (key) to the clipboard
Copy key=value	Copies the full key-value pair to the clipboard
Show graph for key	Opens the time-series bar chart for the selected field
Add as Grouping	Adds the field to the Group by clause in the Query Builder