To help you slice and dice your data, you can use our dynamic filters (left panel) and/or our powerful filter bar, which supports key:value pairs, as well as free text search. The Query Builder works in tandem with our filters.
To further focus your results, you can also restrict the results to specific time windows using the time picker on the upper right of the screen.
The Query Builder is the default search option wherever search is available. Supporting advanced autocomplete of keys, values, and our discovery mode that across values in your data to teach users the data model.
The following syntaxes are available for you to use in Query Builder:
Filters are very easy to add and remove, using the filters menu on the left bar. You can combine filters with the Query Builder, and filters applied using the left menu will also be added to the Query Builder in text format.
Select / deselect a single filter - click on the checkbox on the left of the filter. (You can also deselect a filter by clicking the 'x' next to the text format of the filter on the search bar).
Deselect all but one filter (within a filter category, such as 'Level' or 'Format') - hover over the filter you want to leave on, then click on "ONLY".
You can switch between filters you want to leave on by hovering on another filter and clicking "ONLY" again.
-key:value
Exclude: Specify terms or filters to omit from your search; applies to each distinct search.
-key:value
-term
-"search term"
Logs Traces K8s Events API Catalog Issues
*:value
Search all attributes:
Search any attribute for a value, you can use double quotes for exact match and wildcards.
*:error
*:"POST /api/search"
*:erro*
Logs Traces Issues
Clear all filters within a filters category - click on the funnel icon next to the category name.
Clear all filters currently applied - click on the funnel icon next to the number of results.
key:value
Search attributes:
Both groundcover built-ins custom attributes.
Use * for wildcard search.
Note: Multiple filters for the same key act as 'OR' conditions, whereas multiple filters for different keys act as 'AND' conditions.
namespace:prod-us
namespace:prod-*
Logs Traces K8s Events API Catalog Issues
term
Free text: Search for single-word terms. Tip: Expand your search results by using wildcards.
Exception
DivisionBy*
Logs
"term"
Phrase Search (case-insensitive):
Enclose terms within double quotes to find results containing the exact phrase.
Note: Using double quotes does not work with * wildcards.
"search term"
Logs