OSDOCS-9119: Query Loki manually troubleshooting

Author: skrthomas

modules/troubleshooting-network-observability-query-loki-manually.adoc

@@ -0,0 +1,33 @@
+// Module included in the following assemblies:
+//
+// * networking/network_observability/troubleshooting-network-observability.adoc
+
+:_mod-docs-content-type: PROCEDURE
+[id="troubleshooting-query-loki-manually_{context}"]
+= Running custom queries to Loki
+
+For troubleshooting, can run custom queries to Loki. There are two examples of ways to do this, which you can adapt according to your needs by replacing the <api_token> with your own.
+
+[NOTE]
+====
+These examples use the `netobserv` namespace for the Network Observability Operator and Loki deployments. Additionally, the examples assume that the LokiStack is named `loki`. You can optionally use a different namespace and naming by adapting the examples, specifically the `-n netobserv` or the `loki-gateway` URL.
+====
+
+.Prerequisites
+* Installed Loki Operator for use with Network Observability Operator
+
+.Procedure
+
+* To get all available labels, run the following: 
++
+[source,terminal]
+----
+$ oc exec deployment/netobserv-plugin -n netobserv -- curl -G -s -H 'X-Scope-OrgID:network' -H 'Authorization: Bearer <api_token>' -k https://loki-gateway-http.netobserv.svc:8080/api/logs/v1/network/loki/api/v1/labels | jq
+----
+
+* To get all flows from the source namespace, `my-namespace`, run the following: 
++
+[source,terminal]
+----
+$ oc exec deployment/netobserv-plugin -n netobserv -- curl -G -s -H 'X-Scope-OrgID:network' -H 'Authorization: Bearer <api_token>' -k https://loki-gateway-http.netobserv.svc:8080/api/logs/v1/network/loki/api/v1/query --data-urlencode 'query={SrcK8S_Namespace="my-namespace"}' | jq 
+----

observability/network_observability/troubleshooting-network-observability.adoc

@@ -18,6 +18,8 @@ include::modules/troubleshooting-network-observability-network-flow.adoc[levelof
 
 include::modules/troubleshooting-network-observability-controller-manager-pod-out-of-memory.adoc[leveloffset=+1]
 
+include::modules/troubleshooting-network-observability-query-loki-manually.adoc[leveloffset=+1]
+
 [role="_additional-resources"]
 .Additional resources
 * xref:../../observability/network_observability/configuring-operator.adoc#network-observability-resources-table_network_observability[Resource considerations]