Error Tracking¶
The Error Tracking Explorer filters and displays log data in the workspace that contains the error_stack or error_message field, making it convenient for you to centrally query and analyze application errors.
Error List¶
In the Error Tracking list, you can inspect error information within a specific time range. The following operations are supported:
- Time range selection: Filter errors within a specific time period using the Time Widget.
- Quick filtering: Use the left filter bar to filter data based on business needs, supporting dimensions such as log index, data source, status, host, service, Pod name, container name, etc.
- Search query: Enter filter conditions in the search bar to quickly locate data.
- Display column configuration: Customize the fields displayed in the list.
For more related operations on the list, please refer to Log List.
Error Details¶
Click on an error entry in the list to enter the error details page and view complete information.
Page Header¶
Displays the core identification information of the error:
- Error source: The value of the
sourcefield (e.g.,error_log) - Error title: The error description generated based on
error_message
Error Distribution Chart¶
Displays the distribution of this error over time in a bar chart format, helping to identify the temporal patterns and frequency trends of error occurrences.
Error Details¶
Displays the specific content and stack information of the error:
- Error type: The value of the
error_typefield (e.g.,DBError) - Error message: The complete content of the
error_messagefield - Error stack: Formatted display of the
error_stackfield, supporting JSON structure parsing
Extended Fields¶
Displays all fields of this error log in key-value pair format:
| Field Type | Description |
|---|---|
| Key fields (K) | Core error fields such as error_message, error_stack, error_type, filepath, fingerprint, host, index, etc. |
| Normal fields (L) | System or extended fields such as create_time, date_ns, df_metering_size, log_read_lines, message_length, etc. |
Supports displaying field aliases. Click the icon next to the field name to switch between displaying the field alias (e.g., error_message displayed as "Error Message").
Supports searching for field names or values to quickly locate specific fields.
Correlation Analysis¶
Switch between tabs to view correlated data:
- Context logs: View logs related to this error, supporting navigation to view the previous/next record.
- Host: View information about the host that generated this error.
- eBPF Network: View eBPF network data related to this error.
- Custom bound correlation views.
TOBY AI Error Analysis¶
TrueWatch provides the ability to parse error logs with one click. For more details, please refer to Large Model Automatic Extraction.

