Ask or search…
Comment on page

Log Management

Stream, store, and query your logs at any scale, for a fixed cost.


Our Log Management solution is built for high scale and fast query performance so you can analyze logs quickly and effectively from all your cloud environments.
Gain context - Each log data is enriched with actionable context and correlated with relevant metrics and traces in one single view so you can find what you’re looking for and troubleshoot, faster.
Centralize to maximize - The groundcover platform can act as a limitless, centralized log management hub. Your subscription costs are completely unaffected by the amount of logs you choose to store or query. It's entirely up to you to decide.


Seamless log collection with Alligator

groundcover ensures a seamless log collection experience with our proprietary eBPF sensor, Alligator, which automatically collects and aggregates all logs in all formats - including JSON, plain text, NGINX logs, and more. All this without any configuration needed.
This sensor is deployed as a DaemonSet, running a single pod on each node within your Kubernetes cluster. This configuration enables the groundcover platform to automatically collect logs from all of your pods, across all namespaces in your cluster. This means that once you've installed groundcover, no further action is needed on your part for log collection. The logs collected by each Alligator instance are then channeled to the OTel Collector.

OTel Collector: A vendor-agnostic way to receive, process and export telemetry data.

Acting as the central processing hub, the OTel Collector is a vendor-agnostic tool that receives logs from various Alligator pods. It processes, enriches, and forwards the data into groundcover's ClickHouse database, where all log data from your cluster is securely stored.

Logs Attributes

Logs Attributes are an important feature available for JSON logs, providing you advanced filtering capabilities. Each key:value pair in the original log record is considered as a log Attribute. Nested JSON objects are being flattened first, and keys are delimited using a dot (for example:


groundcover offers the flexibility to craft tailored collection filtering rules, you can choose to set up filters and collect only the logs that are essential for your analysis, avoiding unnecessary data noise. For guidance on configuring your filters, explore our Customize Logs Collection section.
You also have the option to define the retention period for your logs in the ClickHouse database. By default, logs are retained for 3 days. To adjust this period to your preferences, visit our Customize Retention section for instructions.

Log Explorer

Once logs are collected and ingested, they are available within the groundcover platform in the Log Explorer, which is designed for quick searches and seamless exploration of your logs data. Using the Log Explorer you can troubleshoot and explore your logs with advanced search capabilities and filters, all within a clear and fast interface.

Search and filter

The Log Explorer integrates a dynamic filters panel and a versatile search bar to enhance your log data analysis. On the left, the filters panel allows you to filter-out logs by selecting specific criteria, including log-level, workload, namespace and more. The search bar supporting both filters applying and full-text search for comprehensive log exploration. You can also apply the desired time-range using the time-ranger picker on the right-hand corner in the Log Explorer.
To search for logs use the following syntax in the search bar:
Filters: Include filters to narrow down your search. Note - For a single key, multiple filters act with an 'OR' condition, whereas different keys are combined with an 'AND' condition.
"free text"
Free Text Search: Enclose terms within double quotes to find logs containing the phrase. (case-insensitive)
"Execution started"
Exclusion: Specify terms or filters to omit from logs events; applies to each distinct text search.
-namespace:demo -"failed to fetch"
Single term: single-word terms can be searched directly without double quotes to find logs containing the phrase. (case-insensitive)
Log Attribute: Include or exclude logs containing attributes for granular searches. Note - For a single key, multiple filters act with an 'OR' condition, whereas different keys are combined with an 'AND' condition. -@owner:main