Skip to content

Searching logs by different criterias

Pawel Rozlach requested to merge prozlach/search_all_the_logs into main

This MR adds option to search by different criteries like:

  • service names
  • NOT service names
  • severity numbers
  • NOT severity numbers
  • trace IDs
  • NOT traceIDs
  • spanIDs
  • fingerprints
  • traceFlags
  • NOT traceFlags
  • body
  • log attributes
  • resource attributes
  • exact time of the event

Due to schema limitations, we do not support ATM searching by:

  • NOT span IDs and NOT fingerprints - in theory we could workaround it using projections, but not sure there is a use case that would justify the extra work and storage space
  • NOT body - this is a hard limitation explained here
  • NOT log attributes and NOT resource attributes - hard limitation of the bloom filters

Resolves #2738 (closed) and backend part of #2676 (closed)

Edited by Pawel Rozlach

Merge request reports