Log Indexes¶

The system automatically archives log data into corresponding indexes based on set filter conditions. By creating multiple log indexes, you can:

• Isolate log data by business line, environment, or project
• Configure differentiated storage policies for different indexes
• Optimize query performance and reduce scanning of irrelevant data

Create¶

1. Go to the Create > Log Index page.
2. Customize the index name.
3. Add a description as needed.
4. Add filter conditions.

5. Configure the data storage policy: select the log retention period, after which data is automatically cleaned up.

   • Deployment Plan users can customize the storage duration, range: 1d ~ 1,800d.

6. Configure advanced options as needed.

7. Confirm.

Filter Conditions¶

Set the filter rules for logs to enter this index.

1. Condition Relationship:

• Match all conditions: Logs must satisfy all filter rules simultaneously to enter this index.
• Match any condition: Logs can enter this index if they satisfy any one of the filter rules.

2. Filter Rules:

• Field Name: Select a log field (e.g., source, service, host, etc.).
• Operator: Fixed as in.
• Matching Value: Enter field values. Separate multiple values with English commas.

Multiple filter conditions are supported. Click Add Filter to add more rules.

Advanced Options (Optional)¶

Matching Service: Used to associate APM data with application logs.

1. Input Rule: Supports wildcard fuzzy matching (e.g., service*). Separate multiple values with English commas.
2. Scope: When viewing related logs on the APM > Details page, the system prioritizes matching logs from the index associated with the service.

Configuration Example:

• payment*: Matches all services starting with payment.
• order-service,user-service: Exactly matches the two specified services.

Index Limits¶

Further Reading¶