Skip to content

Commit bce2755

Browse files
mdbirnstiehlmdbirnstiehl
committed
update explore logs page
1 parent 79881a2 commit bce2755

File tree

2 files changed

+20
-30
lines changed

2 files changed

+20
-30
lines changed

‎solutions/observability/logs/filter-aggregate-logs.md‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -77,11 +77,11 @@ Filter your data using the fields you’ve extracted so you can focus on log dat
7777
* [Filter logs with Query DSL](../../../solutions/observability/logs/filter-aggregate-logs.md#logs-filter-qdsl): Filter log data from Developer Tools using Query DSL.
7878

7979

80-
### Filter logs in Logs Explorer [logs-filter-logs-explorer]
80+
### Filter logs in Discover [logs-filter-discover]
8181

82-
Logs Explorer is a tool that automatically provides views of your log data based on integrations and data streams. To open **Logs Explorer**, find `Logs Explorer` in the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
82+
Discover is a tool that provides views of your log data based on data views and index patterns. To open **Discover**, find `Discover` in the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
8383

84-
From Logs Explorer, you can use the [{{kib}} Query Language (KQL)](../../../explore-analyze/query-filter/languages/kql.md) in the search bar to narrow down the log data that’s displayed. For example, you might want to look into an event that occurred within a specific time range.
84+
From Discover, open the `logs-*` or `All logs` data views from the **Data views** menu. From here, you can use the [{{kib}} Query Language (KQL)](../../../explore-analyze/query-filter/languages/kql.md) in the search bar to narrow down the log data that’s displayed. For example, you might want to look into an event that occurred within a specific time range.
8585

8686
Add some logs with varying timestamps and log levels to your data stream:
8787

@@ -124,7 +124,7 @@ Under the **Documents** tab, you’ll see the filtered log data matching your qu
124124
:class: screenshot
125125
:::
126126
127-
For more on using Logs Explorer, refer to the [Discover](../../../explore-analyze/discover.md) documentation.
127+
For more on using Discover, refer to the [Discover](../../../explore-analyze/discover.md) documentation.
128128
129129
130130
### Filter logs with Query DSL [logs-filter-qdsl]

‎solutions/observability/logs/logs-explorer.md‎

Lines changed: 16 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -3,62 +3,52 @@ mapped_urls:
33
- https://www.elastic.co/guide/en/observability/current/explore-logs.html
44
- https://www.elastic.co/guide/en/serverless/current/observability-discover-and-explore-logs.html
55
applies_to:
6-
stack: all
7-
serverless: all
6+
stack: ga
7+
serverless: ga
88
---
99

10-
# Logs Explorer [explore-logs]
10+
# Explore logs in Discover [explore-logs]
1111

12-
::::{warning}
13-
This functionality is in beta and is subject to change. The design and code is less mature than official GA features and is being provided as-is with no warranties. Beta features are not subject to the support SLA of official GA features.
14-
::::
12+
From the `logs-*` or `All logs` data view in Discover, you can quickly search and filter your log data, get information about the structure of log fields, and display your findings in a visualization. You can also customize and save your searches and place them on a dashboard. Instead of having to log into different servers, change directories, and view individual files, all your logs are available in a single view.
1513

16-
17-
With **Logs Explorer**, you can quickly search and filter your log data, get information about the structure of log fields, and display your findings in a visualization. You can also customize and save your searches and place them on a dashboard. Instead of having to log into different servers, change directories, and view individual files, all your logs are available in a single view.
18-
19-
To open **Logs Explorer**, find `Logs Explorer` in the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
14+
To open **Discover**, find `Discover` in the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md). Select the `logs-*` or `All logs` data view from the **Data view** menu.
2015

2116
:::{image} ../../../images/observability-log-explorer.png
22-
:alt: Screen capture of the Logs Explorer
17+
:alt: Screen capture of Discover
2318
:class: screenshot
2419
:::
2520

2621

2722
## Required {{kib}} privileges [logs-explorer-privileges]
2823

29-
Viewing data in Logs Explorer requires `read` privileges for **Discover**, **Index**, **Logs**, and **Integrations**. For more on assigning {{kib}} privileges, refer to the [{{kib}} privileges](../../../deploy-manage/users-roles/cluster-or-deployment-auth/kibana-privileges.md) docs.
24+
Viewing data in Discover logs data views requires `read` privileges for **Discover**, **Index**, **Logs**, and **Integrations**. For more on assigning {{kib}} privileges, refer to the [{{kib}} privileges](../../../deploy-manage/users-roles/cluster-or-deployment-auth/kibana-privileges.md) docs.
3025

3126

3227
## Find your logs [find-your-logs]
3328

34-
By default, Logs Explorer shows all of your logs, according to the index patterns set in the **logs sources** advanced setting. To open **Advanced settings**, find **Stack Management** in the main menu or use the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
35-
36-
If you need to focus on logs from a specific integration, select the integration from the logs menu:
29+
By default, the **All logs** data view shows all of your logs, according to the index patterns set in the **logs sources** advanced setting. To open **Advanced settings**, find **Stack Management** in the main menu or use the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
3730

38-
:::{image} ../../../images/observability-log-menu.png
39-
:alt: Screen capture of log menu
40-
:class: screenshot
41-
:::
31+
To focus on logs from a specific source or sources, create a data view using the index patterns of those source. For more information on creating data views, refer to [Create a data view](../../../explore-analyze/find-and-organize/data-views.md#create-a-data-view-settings-create-pattern)
4232

43-
Once you have the logs you want to focus on displayed, you can drill down further to find the information you need. For more on filtering your data in Logs Explorer, refer to [Filter logs in Logs Explorer](../../../solutions/observability/logs/filter-aggregate-logs.md#logs-filter-logs-explorer).
33+
Once you have the logs you want to focus on displayed, you can drill down further to find the information you need. For more on filtering your data in Discover, refer to [Filter logs in Discover](../../../solutions/observability/logs/filter-aggregate-logs.md#filter-logs-in-discover-logs-filter-discover).
4434

4535

4636
## Review log data in the documents table [review-log-data-in-the-documents-table]
4737

48-
The documents table in Logs Explorer functions similarly to the table in Discover. You can add fields, order table columns, sort fields, and update the row height in the same way you would in Discover.
38+
The documents table lets you add fields, order table columns, sort fields, and update the row height in the same way you would in Discover.
4939

5040
Refer to the [Discover](../../../explore-analyze/discover.md) documentation for more information on updating the table.
5141

5242

5343
### Actions column [actions-column]
5444

55-
The actions column provides access to additional information about your logs.
45+
The actions column provides additional information about your logs.
5646

5747
**Expand:** ![The icon to expand log details](../../../images/observability-expand-icon.png "") Open the log details to get an in-depth look at an individual log file.
5848

59-
**Degraded document indicator:** ![The icon that shows ignored fields](../../../images/observability-pagesSelect-icon.png "") Shows if any of the document’s fields were ignored when it was indexed. Ignored fields could indicate malformed fields or other issues with your document. Use this information to investigate and determine why fields are being ignored.
49+
**Degraded document indicator:** ![The icon that shows ignored fields](../../../images/observability-pagesSelect-icon.png "") This indicator shows if any of the document’s fields were ignored when it was indexed. Ignored fields could indicate malformed fields or other issues with your document. Use this information to investigate and determine why fields are being ignored.
6050

61-
**Stacktrace indicator:** ![The icon that shows if a document contains stack traces](../../../images/observability-apmTrace-icon.png "") Shows if the document contains stack traces. This indicator makes it easier to navigate through your documents and know if they contain additional information in the form of stack traces.
51+
**Stacktrace indicator:** ![The icon that shows if a document contains stack traces](../../../images/observability-apmTrace-icon.png "") This indicator makes it easier to find documents that contain additional information in the form of stacktraces.
6252

6353

6454
## View log details [view-log-details]
@@ -72,11 +62,11 @@ The following actions help you filter and focus on specific fields in the log de
7262
* **Filter for value (![filter for value icon](../../../images/observability-plusInCircle.png "")):** Show logs that contain the specific field value.
7363
* **Filter out value (![filter out value icon](../../../images/observability-minusInCircle.png "")):** Show logs that do **not** contain the specific field value.
7464
* **Filter for field present (![filter for present icon](../../../images/observability-filter.png "")):** Show logs that contain the specific field.
75-
* **Toggle column in table (![toggle column in table icon](../../../images/observability-listAdd.png "")):** Add or remove a column for the field to the main Logs Explorer table.
65+
* **Toggle column in table (![toggle column in table icon](../../../images/observability-listAdd.png "")):** Add or remove a column for the field to the main Discover table.
7666

7767

7868
## View log data set details [view-log-data-set-details]
7969

80-
Go to **Data Set Quality** to view more details about your data sets and monitor their overall quality. To open **Data Set Quality**, find **Stack Management** in the main menu or use the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
70+
Go to **Data Sets** to view more details about your data sets and monitor their overall quality. To open **Data Set Quality**, find **Stack Management** in the main menu or use the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
8171

8272
Refer to [*Data set quality*](../../../solutions/observability/data-set-quality-monitoring.md) for more information.

0 commit comments

Comments
 (0)