Log List¶

Global Configuration¶

In the global configuration page, you can operate on two parts: quick filters and index key fields.

Index¶

By setting Log Multi-Index, logs that meet the conditions are stored in different indexes, and appropriate data storage strategies are selected for each index, effectively saving log data storage costs.

You can perform the following operations:

• Select all indexes (may slow down queries due to large data volume)
• Multi-select indexes
• Pin indexes
• Search and locate by index name
• Set index display area to small, medium, or large

After setup, you can switch between different indexes in the Explorer to view the corresponding log content.

Quick Filters¶

For more details, refer to Filters.

Display Options¶

In the display options page, two parts of fields are shown overall:

• Display fields: fields displayed in quick filters.
• Optional fields: all fields cached by the current data type.

You can perform the following operations:

• Search fields; if there is no exact match in the query results, you can directly create and add it to the "Filter Fields".
• Edit field aliases.
• Drag to adjust field order.
• Delete (all) fields.
• Reset to default fields.
• Set whether to display field aliases and time columns.

Status Distribution Chart¶

Based on the selected time range, the system will automatically divide multiple time points and display the number of different log statuses in a stacked bar chart, facilitating efficient statistical analysis. When filtering logs, the bar chart will be updated in real time to show the filtered results.

• Hover to export the chart, which can be exported to dashboards, notes, or copied to the clipboard.
• Customize the time interval.

Search Bar¶

In the log Explorer search bar, multiple search and filter methods are supported.

After entering search or filter conditions, you can preview the results and copy the conditions to apply to charts or query tools.

Manual Configuration¶

Click the toggle button on the right side of the search box to enter manual query mode.

JSON Field Return¶

DQL queries support extracting nested values from JSON fields in log data. You only need to add a field path with the @ symbol in the DQL query statement, and the system will automatically recognize this configuration and display the extracted value as an independent field in the query results. For example:

• Normal query:

• Expected query after extracting embedded fields:

In the log Explorer, if you want to directly specify viewing values extracted from the JSON text of each log message in the data list, add a field in the format @targer_fieldname to the display column. As shown below, we added the @fail_reason configured in the DQL query statement to the display column:

Log Color Highlighting¶

To help quickly locate key information in logs, the system uses color highlighting to display log content. When entering keywords in the search bar, only the matched keywords will be highlighted.

Log Single Line Expand and Copy¶

• Click the button in the log entry to view the full content of the log. If the log supports JSON format, it will be displayed in JSON format; otherwise, it will be displayed normally.

• Click the button to copy the entire log content to the clipboard.

Display Lines¶

In the log data list, the trigger time and content of each log are displayed by default. You can use the "Display Lines" option to choose to display "1 line", "3 lines", "10 lines", or "All content" to view the complete log information.

Settings¶

Create Monitor¶

When filtering log data, if you need to further monitor the filtered results, you can set up a monitor with one click. The system will automatically apply the selected index, data source, and search conditions to simplify the configuration process.

Copy as cURL¶

In the log Explorer, you can obtain log data in command line form. In the Settings on the right side of the log data list, click the Copy as cURL button to copy the corresponding cURL command. Paste this command into the host terminal and execute it to obtain log data that meets the filter and search conditions for the current time period.

Example

After copying the cURL command line, as shown below: where <Endpoint> needs to be replaced with the domain name, and <DF-API-KEY> needs to be replaced with the Key ID from API Management.

For more related parameter descriptions, refer to DQL Data Query.

For more information about API, refer to Open API.

curl '<Endpoint>/api/v1/df/query_data?search_after=\[1680226330509,8572,"L_1680226330509_cgj4hqbrhi85kl1m6os0"\]&queries_body=%7B%22queries%22:\[%7B%22uuid%22:%222eb41760-cf6e-11ed-a983-7d559044c3fc%22,%22qtype%22:%22dql%22,%22query%22:%7B%22q%22:%22L::re(%60.*%60):(%60*%60)%7B+%60index%60+IN+\[%27default%27\]+%7D%22,%22highlight%22:true,%22limit%22:50,%22orderby%22:\[%7B%22time%22:%22desc%22%7D\],%22_funcList%22:\[\],%22funcList%22:\[\],%22disableMultipleField%22:false,%22disable_slimit%22:false,%22is_optimized%22:true,%22offset%22:0,%22search_after%22:\[1680226330509,8572,%22L_1680226330509_cgj4hqbrhi85kl1m6os0%22\],%22timeRange%22:\[1680187562081,1680230762081\],%22tz%22:%22Asia%2FShanghai%22%7D%7D\]%7D' \
- H 'DF-API-KEY: <DF-API-KEY>' \
- -compressed \
- -insecure

In addition to this export path, you can also use other log data export methods.

Set Status Colors¶

The system has preset default colors for status values. If you need to customize the colors displayed in the Explorer for different statuses, click Set Status Colors to modify them.

Format Configuration¶

Through format configuration, you can hide sensitive log content, highlight important log content, or quickly filter by replacing log content.

1. Click Settings in the upper right corner of the Explorer list.
2. Click Format Configuration.

3. Add mapping rules, enter the following content and save:

   • Field: Specify the log field (e.g., content).
   • Match Method: Select the match method (currently supports =, !=, match, not match).
   • Match Content: Enter the content to be matched (e.g., DEBUG).
   • Display As: Enter the replacement display content (e.g., **).

Log Data Export¶

In logs, you can first filter out the required data, and then export it as CSV, JSONL files or export it to dashboards, notes.

To export a specific log, open the log details page and click the in the upper right corner.

Advanced Link Configuration¶

For more details, refer to Advanced Link Configuration.