Filtering logs
PacketAI offers a wide range of powerful filtering controls for your logs.
Last updated
Was this helpful?
PacketAI offers a wide range of powerful filtering controls for your logs.
Last updated
Was this helpful?
The date range filter (or date picker) lets you adjust the time window of observation: either using a a start and end times, or using a relative window.
This filter lets you check/uncheck a given severity to show/hide logs of the corresponding severity. Please note that severity is automatically extracted from your log lines.
This filter provides auto-completion for quick filtering by component. Selected components will be automatically checked.
This menu filter lets you filter by cluster names.
The following filters are only available for Linux infrastructures:
Hosts filter
Service filter
Application filter
This filter lets you select by host names.
This filter lets you select by service names.
This filter lets you select by application names.
The following Workload filters are only available for Kubernetes infrastructures:
Deployment filter
Daemonset filter
Statefulset filter
Cronjob filter
Those filters are shown as a stack:
Each filter supports multiple selection and selected values are shown at the top of the menu.
You can also select multiple workload values at the same time:
This mode lets user perform 1-clic key:value
searches from existing logs.
In addition to standard filters, PacketAI lets you build a custom filter from any available JSON property found in your logs.
After clicking on the top header of a column in the Logs tab, click the Build Filter item to add a new filter widget at the bottom of the Search and Filter area. The filter comes automatically populated with unique values found for that property, letting you quickly and effortlessly drill down in your logs.
Clicking on the calendar icon opens a new menu with quick links to relative time windows
Clicking on either the start date or end date opens a calendar to precisely position either date.
Tip: hold (or the COMMAND key) while clicking on a severity level will display only logs of the selected severity.
Tip: click +k
for a shortcut access to this filter.
Note: when sending logs via one of the supported agents (filebeat, winlogbeat, vector or fluentd), this filter menu contains the values that were configured for the packetai.cluster_name
variable of the agent configuration, like here (for the case of vector agent).
Note: for a Linux infrastructure, this filter menu contains the default value "Linux monitoring"
Container.id
from the column header.Container.id
Custom Filter appears, populated with unique values.