Explore Logs

CtrlB Logs is a robust tool designed for giving fastest query experience in industry
It provides advanced query features for smooth query experience and a real-time view of system's log data for live data analysis.

Getting started with CtrlB

Basic steps to start querying

Step 1 - Open Logs page.
Step 2 - Select the dataset from the dataset dropdown.

Step 3 - Type in the query in the 'Search query' bar.

• Type Cache (i.e keyword) in search bar & press Enter & prefix body contains "Cache" will be automatically added no need to exter entire query

Step 4 - Select desired time from the time filter dropdown. E.g. Last 5 min
Step 5 - Then Click on 'Run Query' button to see filtered logs below.

Step 6 - Form the filtered logs select desired log to view its details on Detailed Log sidepanel.

Query Filters: The Log Explorer integrates dynamic filters and a versatile search functionality that enables you to quickly and easily identify the right data.
Advanced Search Capabilities: Use keywords, phrases, logical operators (AND, OR), and custom filtering options to conduct granular searches.

Detailed Log Sidepanel

1. Table

The Table tab provides a detailed structured view of individual log entries, making it easier to see all associated attributes with each log entry.

Action column has 3 action buttons for smooth query experience:

1. Add filter - Include filter of the key-value pair is added in the query bar
2. Remove filter - Exclude filter of the key-value pair is added in the query bar
3. Add column - The key column is added in Logs table

Users can also rearrange attributes according to their preference using 6-dot-grip icon

2. Raw Json

• The Raw tab provides an unstructured view of individual log entries in JSON format including metadata fields not visible in the table view.
• User can easily copy the entire JSON or particular key vaules by hovering on the key and clicking on the copy icon

3. Surrounding Logs

• The Surrounding Logs tab allows users to view the logs occurring just before and after a specific log entry which is highlighted.
• This feature helps identify potential causes or consequences of the event tied to the selected log.
• User can select the no. of surrounding logs they want to view, by default 5 logs before and after are shown.
• User can click on any surrounding log to further RCA Deeper.

Real Time monitoring

View Live logs data as they get ingested in the system

Advanced Query Filter capabilities

1. Auto Input Attributes in Search Bar

• Easily add attributes using checkboxes to streamline the process of adding filters.
  The interface allows users to select multiple attributes without manually entering values.

2. Automatic Addition of 'AND'/'OR' Between Attributes

• The system intelligently adds logical operators (AND, OR) to refine query-building automatically:

• Same Attribute (OR): If multiple values are selected within the same attribute, the system applies the OR logic to include any of those values in the query bar

• Different Attributes (AND): When selecting different attributes, the AND logic is automatically applied to ensure all criteria are met in the query in the query bar

3. Automatic Grouping of Values from the Same Attribute

• When selecting multiple values from a single attribute, these values are automatically grouped, making it easier to visualize and manage the query.
• This ensures that related values are handled as a single unit, streamlining your workflow.

4. Refresh Button for Attribute Updates

• After selecting the desired attributes, clicking the Refresh Button will update all attribute values and numbers according to the selected values, ensuring that your query reflects the most accurate and up-to-date information.

Before:

After manually refreshing both open components:

Note - Attribute dropdowns that are already open will require manual refreshing via the Refresh Button to display the most up-to-date values. For dropdowns that are closed, they will automatically refresh and update once opened.

Key Features

1. Stop Query

• If a particular query is taking longer time then to stop executing current query, click on 'Stop Query' button and execution will stop.
• Toast 'Query Successfully Stopped' will be shown.
• User can then change filters and click on 'Run Query' button again to Rerun.

2. Saved View

• If a set of particular query filters are used repeatdly then the user can save the query.
• User can choose to keep it private or public by enabling the 'Visible to Organization'.

3. SQL

• View the SQL query of the query built in the search bar

4. Log summary column

• Users can create a log summary in the table by selecting most important attributes and available attribute will be shown (in order of selection).

• The attributes can be selected from dropdown when clicked on pencil icon beside 'Summary' column.

• Min 2 attributes must be selected for summary and at max 5 attributes can be selected.

5. Interactive Filtering on Histogram

• Drag on the bar graph to zoom in on a specific time range and view logs related to that period.

6. Expandable sidepanel

• The side panel can be expanded to give you more space to view your logs using the small blue icon at the edge of sidepanel.

Best Practices

• Incorporate broad and advanced searches to comprehensively explore your log data.
• Engage with the user and team management features to maintain a secure and collaborative environment.

Troubleshooting and Support

For any issues or questions related to the "Logs" feature reach out to us at adarsh@ctrlb.ai. Whether you need troubleshooting assistance, feature explanations, or best practice advice, we're here to ensure you get the most from your log data.