one.newrelic.com > Logs: To explore and manage your logs, use the left nav. To view detailed information, click any log line.
Explore your log data
Use the left nav in the Logs UI as an easy workflow through all logs, attributes, patterns, live-tail logging, and queries. Manage your log data by dropping or parsing data, creating data partitions, and setting up alerts. Hash or mask any sensitive data in your logs with obfuscation expressions and rules. Get more details about specific logs and their attributes from the center nav.
To explore your logging data, follow this basic workflow.
To spot suspicious spikes or drops in log messages, click Patterns on the left nav.
To look at logs for a specific time period, click that point (or click and drag an area) on the chart, or use the time picker.
To narrow the focus of your initial search results or quickly find outliers, review the Attributes section. For example, if a host listed under the hostname attribute is generating significantly more error messages than the others, select that value to apply it to your search.
To manage the amount of log data collected and to store fewer logs, create drop filter rules that avoid collecting data you don't need.
Select a log message to view its details as a table of attributes or as JSON.
To see which attributes are included in a log message, click the log line. Add or remove attributes as needed to help your query focus on the details you need.
To help troubleshoot problems related to a specific value in the log details, show surrounding logs for the attribute's details.
To get more details in extremely long messages, expand the data stored as blobs.
By default, the Logs UI shows all your logs, but you can also search with keywords or phrases to find the results you want. For example:
process failed
You can also use the search field, use the type-ahead dropdowns to select an attribute, operator, and value. For example:
To organize data within an account and to optimize query performance, create data partition rules.
To immediately see how your system responds to deployments or other app changes, enable live-tail logging.
To view all the logs for a specific value, review the attributes list in the selected log's Log details.
To help identify an issue's root cause before it occurred or its impact after an event, click the box on the log line to show surrounding logs.
To see logs in context of other telemetry data for your apps and hosts, use logs in context.
Use any of the core New Relic UI functions (specific account, time range, data explorer, query builder, etc.) to share the data with charts, add to dashboards, etc. For more information, see the examples in this document.
Save your views
You can save your logs query, table configuration, time range, and attribute grouping in a saved view, so that you can quickly return to it later. To save a log analytics view after you've configured the view:
Click Saved views in the Logs UI left nav, then click Save current view.
Give your saved view the name you want for it to be listed in the Saved views list.
Select which aspects from the current view you want to save.
Select the permission level if you want others to view or edit, then save this view.
Examples
Here are a few examples of how you can use the Logs UI to get detailed information. To use some of these examples, you must be able to see logs in context.
Tip
Let your app's APM agent forward log data directly to New Relic with APM logs in context. No need to install or maintain additional third-party software!
You can create alert conditions directly in the Logs UI:
Select a saved view. Or, search for results you want to plot; for example, service_name:"checkout service" "process failed".
Click Add to dashboard, then fill out the details to add to an existing or new dashboard.
You can also create charts with the data explorer or the query builder in New Relic.
To troubleshoot errors this way, you must be able to see logs in context. Then, to have a better understanding of what was happening on the host at the time an error occurred in your app:
Go to APM > Errors inbox or APM > (select an app) > Events > Error analytics, and select an error trace.
From the error trace Details, click See logs.
Browse the related log details.
To identify the host generating the error, click Show surrounding logs.
To troubleshoot latency this way, you must be able to see logs in context. Then, to have a better understanding of how your systems were operating when performance noticeably slowed:
From the trace Details, click See logs for this trace.
Browse the related logs.
Links to logs in New Relic
Depending on your New Relic subscription, you can access your logs from several places in the New Relic UI. For some of these options, you must be able to see logs in context.
Tip
Let your app's APM agent forward log data directly to New Relic with APM logs in context. No need to install or maintain additional third-party software!