Learn how you can create charts with logs data.

You can view logs data on charts or you can use the logs table chart on a dashboard to preview the logs messages so you can troubleshoot faster.

Create a Chart for Logs Data

If you have the Logs and Dashboards permissions, in the Chart Builder you can create logs charts. A logs chart shows the number of logs by certain criteria. For example, see the logs chart in the Logs Browser.

1. Select Dashboards > Create Chart on the toolbar.

2. From the Data drop-down menu, select Logs (Beta).

 The Data drop-down menu.

3. From the Filters drop-down menu, add one or more tag filters.

You can add include and exclude tag filters. See Filter Types and Logical Operators for details.

 The Filters drop-down menu.

4. Optionally, next to the Functions drop-down menu, click Count, select one or more tags by which you want to group the number of logs, and click Apply. To add a note with code segment in it, follow the format given below:

The Count drop-down menu.

If you select the stacked-column chart, the resulting chart shows the number of logs matching the selected filters distributed over the selected time window. The logs are grouped by the values of the selected grouping tags. You can zoom in on smaller time windows. You can also use the logs table chart to see the logs on your chart. Logs histogram chart

Logs Table Chart

To troubleshoot faster, you can have the logs data on the same dashboard that you use to monitor your application, service, sources, etc., by using the logs table chart.

Create a Logs Table Chart

Follow these steps:

  1. Select Dashboards > Create Chart on the toolbar.
  2. Select the Logs Table chart type.
  3. From the Data drop-down menu, select Logs (Beta) and add the filters that you want.
  4. Click the Format tab to customize the data displayed on the chart.
    OptionDescription
    Sort by Timestamp By default, you see the latest logs on the top of the table (Descending). If you want to see the oldest logs, select Ascending.
    Number of Message Lines Select the number of log lines you want to see in the Message column to get a better preview of the log message.
    Columns to Show in Table Each log has required attributes, standard attributes, and custom tags. We tokenize the values of these attributes and tags so that you can filter and search logs. For more details, see Log Attributes. Select the tags for which you want to see see information in new columns.
  5. On the top right, click Save.
  6. Specify the dashboard in which you want to insert the chart or create a new dashboard.

View Logs on the Chart

Once the chart is in a dashboard, you can:

An annotated screenshot of the logs table chart. The annotations are listed as bullets below.

  • Search for keywords or phrases. You only get results for the data in the logs chart table.
  • You only see the first 50 logs. To see more logs, click the ellipsis icon in the top-right corner of the chart and select Logs (Beta).
  • If you want to drill into a specific log, right-click the row on the table, and click Logs (Beta). The tags on the log you selected carry over to the Logs Browser as filters, and you see all the logs with the same filters.
  • If you want to see a specific log message while you troubleshoot and examine the other charts in the dashboard:
    • Press Shift + p to pin the log message to the chart.
    • To close the logs detail pop-up, click the x in the top right corner.
  • If you want to copy a log message, press Shift + c.

Learn More!