Explore and filter logs data

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Explore and filter logs data

edit

Use the Logs app in Kibana to explore and filter your logs in real time.

You can customize the output to focus on the data you want to see and to control how you see it. You can also view related application traces or uptime information where available.

Logs Console in Kibana

Use the power of search

edit

To perform ad hoc searches for specific text, use the search bar. You can also create structured queries using Kibana Query Language. For example, enter host.hostname : "host1" to see only the information for host1.

Configure the data to use for your logs

edit

Are you using a custom index pattern to store the log entries? Do you want to limit the entries shown or change the fields displayed in the columns? If so, configure the logs source data to change the index pattern and other settings.

Specify the time and date

edit

Click time filter calendar, then choose the time range for the logs.

Log entries for the specified time appear in the middle of the page. To quickly jump to a nearby point in time, click the minimap timeline to the right.

Customize your view

edit

Click Customize to customize the view. Here, you can choose whether to wrap long lines and select your preferred text size.

Configuring the data to use for your logs

edit

If your logs have custom index patterns, use non-default field settings, or contain parsed fields which you want to expose as individual columns, you can override the default configuration settings.