Querying data by using DataPrime
IBM Cloud Logs log data can be searched using DataPrime or Lucene. For information on querying with Lucene, see Querying data by using Lucene.
Searching can be used in conjunction with filtering and limiting by time.
Accessing Explore
You can query logs from the Explore screen:
-
Click the Explore logs icon > Logs.
-
(Optional) If you want to explore archived data from the Analyze and alert or Store and search pipelines, click Archive. To switch back to data currently maintained in the Priority insights pipeline click Priority Logs.
Using DataPrime
-
Use the < > Lucene/< > DataPrime switch to change the search type to DataPrime.
-
In the search field specify your search in DataPrime format.
See the DataPrime reference for operators and expressions that can be used when querying logs.
-
Click the arrow at the end of the field run your query.
Resetting filters and search queries
You can clear all filters and queries by clicking Reset.
Saving a view
Once you have your view with the log records you want to see by using filters or searches, you can save the view for future use.
To save a view:
-
Click Unsaved View.
-
Enter the name for your view.
-
Optionally indicate if you want to save the query and filters as part of the view.
-
Optionally indicate if you want the view set as your default view when opening IBM Cloud Logs
-
Select if you want the view to be private to you or shared with other users.
-
Click SAVE to save your view.