Logs

​

Choose a stream and time range

​

Query modes

SELECT "_timestamp", level, service_name, message, trace_id
FROM app
WHERE level = 'error'
ORDER BY "_timestamp" DESC
LIMIT 200;

SELECT service_name, COUNT(*) AS errors
FROM app
WHERE level = 'error'
GROUP BY service_name
ORDER BY errors DESC;

​

Inspect results

• visible-field selection and structured value rendering;
• event pagination;
• row details with the original fields;
• five surrounding records on either side of the selected event;
• pivots to a trace, service, metric, or other correlated signal when identifiers are present.

​

Save repeatable searches

​

Permissions

• streams.read discovers streams and schemas.
• streams.query runs searches and opens context.
• saved_views.create, saved_views.edit, and saved_views.delete control saved views.