Using Livetail
IBM® Cloud Logs provides a Livetail view where you can view the data that is ingested by IBM Cloud Logs as the data is received.
A Livetail view can run continuously for 10 minutes. After 10 minutes the Livetail will stop and you will need to access the Livetail again to restart the view.
Accessing Livetail
To access Livetail:
-
In the console, click the Navigation Menu icon
> Resource list. -
Select your instance of IBM Cloud Logs.
-
In the IBM Cloud Logs navigation, click the Livetail icon
.
Livetail options
The following options are available when you are interacting with Livetail.
| Option | Usage |
|---|---|
| Start | Click to start the display of Livetail data. When selected, Livetail data starts being displayed and the option changes to Pause. |
| Pause | Pauses running Livetail data. When selected, the Livetail data pauses being is displayed and the option changes to Start. |
| Clear | Deletes the displayed data to the point when Clear is clicked. If Clear is clicked when the Livetail is still running, new data is displayed as it is ingested. |
| Prettify | Structures the displayed data as formatted objects. When selected the option changes to Unprettify. |
| Unprettify | Structures the displayed data as raw data lines. When selected the option changes to Prettify. |
| Choose fields | Limits the displayed data to the specified fields. One or more fields can be specified. |
| All Applications | Limits the displayed data to the selected application names. |
| All Subsystems | Limits the displayed data to the selected subsystem names. |
Querying data
You can use grep, exact text, or a regex expressions to search for specific data within the Livetail.
The following example shows how text and regex searches can be combined. First, a case-insensitive regex search of mydata.io is done. The search results are then filtered with an exact text search of schemas. Finally,
a case-insensitive search of TimE is applied to the filtered results.
| grep -i mydata\.io | grep "schemas" | grep -i TimE