The Logs Explorer comes with quick filters which allows filtering of logs based on key attributes making it easier to analyze and debug applications.
How to use quick filters
Accessing Filters: Open the logs explorer and locate the quick filters panel on the left side.
Selecting Filters: Click on the desired filter category to expand it. For example, click on "K8s Cluster Name" to select a particular cluster.
Setting Filter Values: Select the appropriate values for the filter. For instance, you can select specific severity text.
Applying Filters: Once you set the filter values, the Logs Explorer will automatically update the displayed logs based on the selected filters.
Multiple Queries Filters: If there are multiple queries, the
Filters Forsection will display the query name which is currently in sync with the filter and all the filter actions will be applied to this query.
How to change sync in Multiple Queries: The last interacted query will be in sync with quick filter. Interact with any query to sync it with the filters bar.
Clearing Filters: If you need to reset a filter, click on the "Clear All" option next to the filter category. You can also clear all applied filters at once by clicking on a Reset button available at the top. It will reset the filters for the query it is in sync with.
Customizing Filters: Click the settings icon at the top-right of the filters panel and select Edit quick filters to add or remove filters. You can add any resource or log attribute as a custom quick filter.
Adding Custom Quick Filters
The quick filters panel shows a set of default filters (like Severity Text, Service Name, K8s Namespace, etc.), but these are not the only ones available. You can add any resource or log attribute as a quick filter.
To customize: click the settings icon at the top-right of the quick filters panel, then select Edit quick filters. This opens an editor showing your currently added filters and all other available attributes. Search for any attribute and add it to the panel.
Only users with the Admin role can edit quick filters. Users with the Viewer or Editor role do not have access to this feature.
For the list of default filter attributes and their OpenTelemetry mappings, see the Default Quick Filters Reference.