Log Explorer

Note

Without the Log Read role, you cannot enter the menu.

Home screen > Select Project > Log > Log Explorer New

The Log Explorer feature allows you to quickly search, filter, and analyze log data. You can understand the field structure, perform query-based filtering to efficiently search for logs, and visualize the results. This feature is based on the Lucene index and offers the following key functions:

1. Log trend analysis and search: Enables both log trend visualization and search, helping you understand log patterns over time.

2. Fast search and filtering: Search for problematic logs quickly using simple keywords. Supports both WhaTap log search query and Lucene query syntax for defining various search conditions.

3. Autocomplete functionality: Helps users write and learn queries easily through auto-suggestions.

4. Data visualization: Uses stacked graphs to visualize the volume of logs over time. Drill-down capability allows deep analysis of specific logs.

5. Favorites and sharing: Save frequently used filters as favorites and share them easily via URL.

Basic Screen Overview

Time Range Selection

Set the time range for the log search using the Time Selector in the top option bar.

Category

Select the type of log you want to explore in Select Category on the top option bar (e.g., AppLog).

Filter

In the Filter on the top option bar, select the query language and enter the search conditions to apply the filter.
The search query syntax supports both WhaTap Log Search Query and Lucene Query.

• : WhaTap Log Search Query

• : Lucene Query

Search Query Syntax

WhaTap log search query

WhaTap log search queries support autocomplete and allow quick log searches with simple keyword input. You can define various search conditions using operators like and, or, etc.

• Example: Entering error in the search filter will search within the log content.

  1. In the top option bar, click the filter icon and select a field from the query search box (fields are shown based on selected time and category).

  2. Choose an operator:

     a. Default: :, :*, and, or
     

     b. If the field is of type Number: Default + <=, >=, <, >
     

     c. If the field is of type String: Default only

  3. Select a value (values shown based on selected time, category, and field).

Search Index Field Types

Only three field types are supported: Number, String, and Boolean.

• Number: Numeric values like long, double, float

• String: Full text such as email body

• Boolean: A value of either True or False

Note

For more details about WhaTap log search query syntax, refer to the documentation.

Lucene

Use the standard syntax of Apache Lucene version 8.11.1. Autocomplete is not supported.

Note

For more information on the Lucene QueryParser Classic package, see the official documentation.

Field List

Can be used for drill-down analysis.

Apply Field Info to Filter

Check field names in the Field List and click the = or != buttons to apply them as filter conditions.

• Hovering over a field shows the = and != buttons, which can be clicked to apply filters.
• Use the field search function to quickly find the desired field.

Trend Chart

Use Trend Chart to view logs in graph form with interval and breakdown applied.

• Graph Interaction: Zoom in using mouse drag or the button, and click bars to view logs in that area

• Interval: Choose from Auto, 1s, 5s, 30s, 1m, 5m, 10m, 30m, 1h

• Breakdown: Visualize distribution of Top 3 values + Others for a specific field, and apply drill-down filters

Breakdown

Breakdown is a visualization feature that analyzes log count trends by a specific field.

• Displays a stacked graph separating the Top 3 values and Others for a given field
• Useful for drill-down analysis. You can click parts of the legend or stacked graph to highlight specific values or add filter conditions.

View Logs

You can view logs that match your search conditions. In the Field List, field data and log tags are displayed in matching highlight colors.

Content Highlight

The highlight function allows you to easily identify desired keywords in log content. You can filter with single or multiple keywords.

1. Enter the keyword you want to highlight in the keyword input field.

   • Example: select

2. The searched keyword will be highlighted in the Content of the log list.

   • If you click the Log full screen icon, you can view Log and Timestamp in fullscreen.

   • You can navigate between highlighted keywords using shortcuts.

     • Enter: Move to the next row
     • Shift+Enter: Move to the previous row
     • / icons: Move between rows
     • Cmd+F (Mac) / Ctrl+F (Windows): Search keywords

Multi-keyword condition

When highlighting with multiple keywords, write as follows:

String to input	Description	Result
a b c	Separate each keyword with a space.	a, b, c
"Whatap is good."	To include spaces in keywords, wrap them in '' or "".	Whatap is good.
"Whatap\\ is good."	If \ is included in the keyword surrounded by "", enter it as \\.	Whatap\ is good.

Setting the highlight color

By selecting Highlight, you can set the keyword and its color for highlighting.

• In addition, enter the keyword to set the color for.

• If you click Color on the left of the input field, available colors appear.

• Basically, different highlighting by the level (WARN, ERROR, FATAL) is applied.

• The settings are saved in Project Rules.

Column settings

Click the button to add columns or change their order.

• Add Columns

  In Column Settings, select tags to add them as columns in the table.

  Caution

  If no log columns are selected, Log view detail setting will not be visible. At least one column must be selected.

• Reorder Columns

  Added columns will appear in Display columns. Drag them to change the display order.

Log view detail setting

Click the button to configure log display options. By default, both content and Tag are selected and shown.

• Either content or Tag must be selected.

• Tags added in Tag management appear in order in the log display. You can reorder tags by dragging. Disabled tags are not shown.

• If an item is unchecked, it is not shown in the table. For example, if Tag is unchecked, log tags are not displayed.

Note

Scope of Column and Log Display Settings

• Column settings and Log view detail setting can be used in Live Tail, Log Search, and Log Trend.

• In the same project, Live Tail, Log Search, and Log Trend share Column settings and Log view detail setting.

Download Log File

You can download the collected logs that match your search results in CSV or TXT file formats.

1. Click the Download button at the right center of the screen.

2. Click Download CSV or Download Log to download the file in your preferred format.