Search and analyze logs from various sources to debug issues and monitor your systems.

​
Supported Log Sources

  • Loki
  • Elasticsearch
  • CloudWatch Logs
  • Google Cloud Logging
  • Azure Monitor Logs

​
Query Syntax

​
Loki (LogQL)

# Basic log line filter
{app="api"} |= "error"

# Parse and extract fields
{app="nginx"} | json | status >= 500

# Calculate rates
sum(rate({app="api"} |~ "error" [5m])) by (pod)

​
Elasticsearch (KQL)

# Basic search
kubernetes.container.name: "api" and message: "error"

# Time range
@timestamp >= now-15m and @timestamp <= now()

​
Examples

​
Error Patterns

# Find errors with stack traces
{app="backend"} |~ "(?i)error|exception|fail"

​
Performance Issues

# Slow API responses
{app="api"} | json | duration > 1000

​
Best Practices

  • Use specific labels/tags to filter logs
  • Leverage parsing to extract structured data
  • Use time ranges to limit result sets
  • Create alerts for recurring error patterns
  • Use log sampling for high-volume logs