Navigating to the web UI

After you provision an instance of the IBM Log Analysis service in the IBM Cloud, and configure a logging agent for a log data source, you can view, monitor, and manage logs through the IBM Log Analysis web UI.

As of 28 March 2024 the IBM Log Analysis and IBM Cloud Activity Tracker services are deprecated and will no longer be supported as of 30 March 2025. Customers will need to migrate to IBM Cloud Logs, which replaces these two services, prior to 30 March 2025. For information about IBM Cloud Logs, see the IBM Cloud Logs documentation.

Granting IAM policies to a user to launch the web UI

Users in your account need permissions to launch the logging web UI.

You must be an administrator of the IBM Log Analysis service, an administrator of an IBM Log Analysis instance, or have account IAM permissions to grant other users policies.

The following table lists the minimum policies that a user must have to be able to launch the web UI, and view data:

IAM policies
Service	Role	Permission granted
`IBM Log Analysis`	Platform role: Viewer	Allows the user to view the list of service instances in the Observability Logging dashboard.
`IBM Log Analysis`	Service role: Reader	Allows the user to launch the Web UI and view logs in the Web UI.

For more information on how to configure these policies for a user, see Granting permissions to a user to view logs.

Launching the logging web UI through the IBM Cloud UI

You launch the logging web UI within the context of an IBM Log Analysis instance, from the IBM Cloud UI.

Complete the following steps to launch the web UI:

Log in to your IBM Cloud account.
Click the Menu icon > Observability.
Click Logging.

The list of instances that are available on IBM Cloud is displayed.
Select one instance. Then, click Open dashboard.

The Web UI opens.

Launching the logging web UI from a browser

You can launch the logging web UI directly from a browser.

Complete the following steps:

Get the instance ID.
Enter the following URL in a browser.
```
https://cloud.ibm.com/observe/embedded-view/logging/<INSTANCE_ID>?q=<QUERY>&hosts=<HOSTS>&apps=<APPS>&levels=<LEVELS>&tags=<TAGS>&t=<TIMEFRAME>
```
Where
- <INSTANCE_ID> indicates the instance ID.
- <QUERY> represents the search query that is applied for the view, for example, q=table%3Amangle%20reason%3A%27refresh%20timer%27.
  
  Use %3A to represent a colon (:).
  
  Use %20 to represent a space.
  
  Use %27 to represent a quote (').
- <HOSTS> represents the list of hosts for which data is included in the view. Multiple hosts are separated by commas, for example, hosts=logging-agent-trkq9,logging-agent-trkq7.
- <APPS> represents the list of apps for which data is included in the view. Multiple apps are separated by commas, for example, apps=autoscaler,catalog-operator.
- <LEVELS> represents the list of levels for which data is included in the view. Multiple levels are separated by commas, for example, levels=warn,debug.
- <TAGS> represents the list of tags for which data is included in the view. Multiple tags are separated by commas, for example, tags=agent-v2,k8s.
- <TIMEFRAME> represents the timeframe that you apply to the data that is displayed through the view. For example, look at the following samples:
  
  When you specify a timeframe of July 12, the value is t=July%2012.
  
  When you specify a timeframe of July 12, 2020, the value is t=July%2012%2C%202020.
  
  When you specify a timeframe of July 12, 2020 to July 15,2020, the value is t=July%2012%2C%202020%20to%20July%2015%2C2020.

You might need to log in to IBM Cloud to view the data if your token has expired or you are not logged in.