Skip to content

Trace Details


In the Trace Explorer, click any trace to view its details, including relative time, duration, HTTP method, URL, status code, Trace ID, Flame Graph, Span list, service call relationships, resource call relationships, and related logs, hosts, metrics, and network information. For frontend applications (such as browsers), you can also view the request timing distribution, including the duration ratios of queue, first byte, and download.

When you open trace details, the system automatically collapses the quick filter panel on the left side of the Explorer to widen the detail charts and displays the Waterfall Chart or Flame Graph first according to the "Trace Details Default View" option in Preferences.

You can use the layout switcher to move extended attributes and other information to the bottom or right of the charts, adjusting the detail page layout as needed.

When you open a record from a cross-workspace query result, the details and related data are queried in the source workspace of that record. When switching to the previous or next record, the source workspace of the new record is used; a service with the same name or the same identifier cannot be used as a substitute for source determination. If the source workspace cannot be confirmed, the details entry is unavailable; refresh and try again. For query scope and permission details, see Cross-Workspace Query.

Note
  • The Real User Monitoring (RUM) SDK must be version 2.2.10 or later to view this data. If cross-origin conditions exist, you need to adjust the header configuration.

For more details, refer to Web Application Integration.

  • The Flame Graph, Span list, and Waterfall Chart display up to 10,000 Spans. You can use the offset setting to view Spans that are not displayed:

Flame Graph

The Flame Graph clearly shows the flow and execution time of each Span. On the right side, you can view the service list and response time. Click a Span to view its JSON content in the trace details, and use the mouse wheel to zoom for specific information.

For more details, refer to Using Flame Graphs to Analyze Trace Performance.

As shown in the Flame Graph above, this call chain involves two services: CloudCare and Mysql. The chain begins with a POST request to the CloudCare service, then executes ActionResource.executeAction, and finally executes Mysql statements. During the entire execution of ActionResource.executeAction, Mysql statements are executed multiple times. The execution times of CloudCare and Mysql are calculated as follows:

  • Execution time of the CloudCare service = D1+D2+D3+D4+D5+D6+D7+D8+D9+D10+D11
  • Execution time of the Mysql service = span2+span3+......+span11

For the specific statements executed and execution time details, refer to the Span list.


The service execution time ratio in the Flame Graph is the ratio of each service's execution time to the total time of this call chain. In the following example, the call chain includes two services, CloudCare and Mysql, with execution time ratios of 42.37% and 57.63%, respectively. The CloudCare service has 2 Spans, and the Mysql service has 10 Spans.

  • Mysql service execution time ratio: sum of all Span execution times / total duration of the current call chain.

Calculation notes: In the figure below, the Mysql service has 10 Spans in total. Click each Span to get its execution time. As shown in the figure, this Span's execution time is 5.08 ms. Then repeat the procedure for the remaining 9 Spans and add their execution times together.

  • CloudCare service execution time ratio: (total duration of the current call chain - Mysql service execution time) / total duration of the current call chain

Calculation notes: In the figure below, the CloudCare service spans the entire call chain. Excluding the Mysql service execution time, the remaining time is the execution time of the CloudCare service (see the execution time marked by the red line). The execution time ratio can also be viewed directly in the Span list, which shows the execution time and execution time ratio of each Span.


In the Flame Graph, whether a service is called synchronously or asynchronously, you can clearly track the data details of each trace's performance. For example, the Flame Graph clearly shows which requests ran asynchronously, along with their start times, end times, and total durations.


Span List

  • Displays the resource name, count, duration, execution time, and ratio of all Spans in the trace.
  • Enter a resource name or Span ID to search for matches.
  • Click any Span to view its JSON content in the trace details; the Flame Graph updates synchronously to highlight the same Span.
  • If errors exist, error indicators are displayed.
  • Click Error Spans to directly display the results that match the filter.

Waterfall Chart

You can view the parent-child relationships between resources.

The Waterfall Chart displays Span data in order of start time. The list on the left shows Span data, including the execution time ratio of each resource. The right side displays the waterfall chart in chronological order.

  • Enter the resource name or Span ID of a Span to search for matches.
  • Collapse or expand the resources on the left with one click.
  • Click to toggle the format of the execution time.
  • Click Error Spans to directly display the results that match the filter.

Service Call Relationships

The service call relationships display the call relationships and performance information between different services in a rectangular diagram, including execution time, average duration, call count, total requests, average request rate, P99 response time, and error count. Requests and related metrics are calculated based on entry Spans.

By default, the current trace is analyzed. After enabling the time widget, you can select a time range to analyze the service call data within that range. Requests per second are also displayed, and the execution time ratio is hidden.

Click any service node to view its details:

  • Service operations and resources: Lists the specific operations (such as API endpoints, methods, etc.) included in the service and their related resources.

  • Error status tracking:

    • If the service has errors, the error details are displayed directly.

    • Click it to view the parent Span of the service, which is used to trace the upstream call source.

Note

When analyzing the current trace, the system determines the service color based on the error result of the corresponding service in Trace Details > Flame Graph.

Uninstrumented HTTP External Services

When a call chain passes through an uninstrumented HTTP external service, the system identifies the service based on the upstream and downstream Span information and generates a virtual Gateway node in the service call relationships.

The call relationship may be displayed as:

  • When a unique caller can be identified: Caller Service → Gateway → Downstream Service;
  • When a unique caller cannot be identified: Root → Gateway → Downstream Service.

All of the following conditions must be met to generate a Gateway node:

  • The downstream is an HTTP Server Span;
  • The Server Span's parent_id is valid and not 0;
  • The corresponding parent Span is still not found after a supplementary query;
  • The Span contains a recognizable external service address.

A Gateway node is not generated when only HTTP Client Spans exist.

The virtual Gateway has no standalone Span, so call count, duration, and error count are not calculated; the related metrics display as -, and the node is shown in a neutral state.

Warning

The virtual Gateway is displayed only in the "Service Call Relationships" section of the Trace details and is not displayed in the Waterfall Chart or the Flame Graph.

The Root Span is queried separately with supplementary queries based on trace_id and parent_id=0, and it may take up to about 6 hours for the data to be fully identified. When a single trace exceeds 10,000 Spans, misidentification can still occur because the parent Span is not included in the query results.

Resource Call Relationships

In the trace details, select a Span, then switch to the "Resource Call Relationships" tab to the right of "Service Call Relationships" to view the upstream and downstream call relationships of the service and resource to which the Span belongs.

The relationship diagram centers on the resource corresponding to the selected Span and displays the nodes and traces that have direct or indirect call relationships with it within the selected time range. The scope is not limited to the current trace; resources with the same name are distinguished by their owning service. When cross-workspace query is enabled, only workspaces that the current account has permission to access are queried.

The diagram provides an independent time widget in the upper-right corner. Adjusting the time range updates only the resource call relationship diagram and does not affect the outer list or other detail tabs. Auto-refresh is disabled by default; manual refresh re-queries the currently selected time range.

After switching Spans, the system updates the central resource and reinitializes the time range based on the new Span's start time. When switching tabs within the same Span, the adjusted time range is retained.

The diagram highlights the central resource node and provides node instance information, a legend, zoom, fit-to-canvas, and full-screen operations. When entering or exiting full-screen mode, the current resource, time range, and query results are retained.

  • Multiple levels of upstream and downstream call relationships are displayed by default, with hints for nodes that can be further expanded; you can continue expanding level by level.
  • Resources at the same level are sorted by response time.
  • Click a call connection line to view the key metrics and trends of the corresponding call relationship.

When a Span lacks the necessary service or resource fields, the page shows the reason why the query cannot be performed. If there is no call relationship data, adjust the time range and try again. If the query fails, retry as prompted.

Quick Operations

Operation
Description
View full screen / Restore default size You can click the full-screen icon in the upper-right corner of the trace details to expand the Flame Graph horizontally. Click the restore default size icon to restore the detail page.
Locate current Span Click to zoom in and locate the current Span
Expand/collapse minimap You can click the expand/collapse minimap icon on the left side of the trace details to quickly view the Flame Graph by selecting ranges, dragging, and scrolling on the minimap.
View global trace You can click the View Global Trace icon on the left side of the trace details to view the global trace in the Flame Graph.
Double-click a Span The Span is enlarged in the center of the Flame Graph so you can quickly locate and view its context-related Spans.
Click a service name Highlights the corresponding Spans. Click the service name again to restore the default selection of all Spans. You can click a service name to quickly filter and view the Spans of the corresponding service.
Toggle information layout Use the layout switcher to display extended attributes and other information at the bottom or on the right side of the chart.

Extended Attributes

  • In the search bar, enter a field name or value to quickly search and locate.

  • After selecting a field alias, you can view it after the field name; select as needed.

  • On the trace details page, you can view the field attributes related to the current trace in Extended Attributes:

Field
Description
Filter by field value Adds the field to the Explorer to view all data related to that field. You can filter the trace list in the Trace Explorer by this field.
See Figure 1
Filter out field value Adds the field to the Explorer to view all data except for that field
Add to display columns Adds the field to the Explorer list for viewing
Copy Copies the field value to the clipboard. For object and array type fields, you can copy the complete JSON value with one click, without expanding items or switching to the JSON view.

Some fields do not support filtering, aggregation, and related logic

Some fields in TrueWatch use full-text indexing and do not support filtering, aggregation, or other related logic. The full-text index fields are as follows:

Category Fields
Objects, Resource Catalog message
Logs, Backup Logs message
Security message / title
Network message
Traces error_message / error_stack
Events message / title / df_message / df_title
RUM Errors error_message / error_stack
RUM Long Tasks long_task_message / long_task_stack

Figure 1

Error Details

On the trace details page, if the current trace contains errors, select the error span filter option in the sidebar. The system automatically highlights all error Spans. Click any highlighted Span to view its associated error stack, logs, and other details.

For more details, refer to Error Tracking.

Service Context

By retrieving the object categories in the Infrastructure Resource Catalog and displaying the latest object based on create_time, you can quickly view the runtime information, service dependencies, and integration information of the current service.

You can use Logs to view the log data associated with all services in the entire trace (correlation field: trace_id). You can customize the displayed columns. To view more detailed log content, click the log content to go to the log details page, or click the jump button to open the Logs page.

The system matches the log index mapping based on fields such as service, env, and version of the current trace and automatically selects the corresponding log index. The original "Match Service" configuration of the index continues to take effect according to the service field mapping.

If you have Administrator permissions or above, you can customize the correlation fields. Click the settings button to the right of the correlation field, select the fields to correlate in the dialog box that appears, and use operations such as manual input and drag-and-drop reordering. Confirm to complete the configuration.

Note: The custom fields for related logs and the custom fields configured in the related analysis of the Service List affect each other. If custom fields are configured in the Service List, they are displayed here synchronously.

When an application uses the ddtrace collector with both APM distributed tracing and Profile performance tracing data collection enabled, the system provides Span-level code hotspot correlation, including execution duration, methods, and execution time ratios.

Click View Profile Details to jump to the Profile details page to view more related code.

On the trace details page, you can use Hosts to view the metrics view and properties view of the related hosts (correlation field: host).

  • Metrics view: View the performance metric status of the related hosts from 30 minutes before the trace ends to 30 minutes after it ends, including performance metric charts such as CPU and memory of the related hosts.

  • Properties view: Helps you trace back the actual state of the host objects when the trace occurred. You can view the latest object data generated by the related hosts in the corresponding time period, including basic host information and integration runtime status. If cloud host collection is enabled, cloud provider information is also available.

Note: TrueWatch stores historical data for host objects over the most recent 48 hours by default. If historical host data corresponding to the current trace time is not found, you cannot view the properties view of the related hosts.

On the trace details page, you can use Containers to view the metrics view and properties view of the related containers (correlation field: container_name).

  • Metrics view: View the performance metric status of the related containers from 30 minutes before the trace ends to 30 minutes after it ends, including performance metric charts for container CPU, memory, and more.

  • Properties view: Helps you trace back the actual state of the container objects when the trace occurred. You can view the latest object data generated by the related containers in the corresponding time period, including basic container information and attribute information.

On the trace details page, you can use Pods to view the properties view and metrics view of the related Pods (correlation field: pod_name).

  • Metrics view: View the performance metric status of the related Pods from 30 minutes before the trace ends to 30 minutes after it ends, including performance metric charts for container CPU, memory, and more.

  • Properties view: Helps you trace back the actual state of the Pod objects when the trace occurred. You can view the latest object data generated by the related Pods in the corresponding time period, including basic Pod information and attribute information.

TrueWatch allows you to view network topology and overview data across multiple dimensions, including Host, Pod, Deployment, and Service, in Network.

Correlation fields:

To view related network data on the details page, the corresponding correlation fields must be matched. That is, you need to configure the corresponding field tags during data collection; otherwise, the related network views cannot be matched and displayed on the details page.

  • Host: Correlation field host.

  • Pod:

Correlation field priority
namespace, pod_name
namespace, pod
pod_name
pod
  • Deployment:
Correlation field priority
namespace, deployment_name
namespace, deployment
deployment_name
deployment
  • Service:
Correlation field priority
namespace, service_name
namespace, service

Note:

  • If correlation fields for Host, Pod, Deployment, and Service are all found, the network data is displayed in this order on the details page.
  • If no correlation field is found, it is displayed in gray at the end; clicking it prompts Network view not matched.