Important: This documentation is about an older version. It's relevant only to the release noted, many of the features and functions have been updated or replaced. Please view the current version.

Documentation Grafana documentation Panels and visualizations Visualizations Logs

Logs

The logs visualization shows log lines from data sources that support logs, such as Elastic, Influx, and Loki. Typically you would use this visualization next to a graph visualization to display the log output of a related process.

Give it a try using Grafana Play

With Grafana Play, you can explore and see how it works, learning from practical examples to accelerate your development. This feature can be seen on Logs Panel.

Try it

The logs visualization shows the result of queries that were entered in the Query tab. The results of multiple queries are merged and sorted by time. You can scroll inside the panel if the data source returns more lines than can be displayed at any one time.

To limit the number of lines rendered, you can use the Max data points setting in the Query options. If it is not set, then the data source will usually enforce a default limit.

The following video provides a walkthrough of creating a logs visualization. You’ll also learn how to customize some settings and log visualization caveats:

Panel options

In the Panel options section of the panel editor pane, you set basic options like the panel title and description. You can also configure repeating panels in this section. To learn more, refer to Configure panel options.

Log level

For logs where a level label is specified, we use the value of the label to determine the log level and update color accordingly. If the log doesn’t have a level label specified, we try to find out if its content matches any of the supported expressions (see below for more information). The log level is always determined by the first match. In case Grafana is not able to determine a log level, it will be visualized with unknown log level. See supported log levels and mappings of log level abbreviation and expressions.

Log details

Each log row has an extendable area with its labels and detected fields, for more robust interaction. Each field or label has a stats icon to display ad-hoc statistics in relation to all displayed logs.

Data links

By using data links, you can turn any part of a log message into an internal or external link. The created link is visible as a button in the Links section inside the Log details view.

Display options

Use these settings to refine your visualization:

• Time - Show or hide the time column. This is the timestamp associated with the log line as reported from the data source.
• Unique labels - Show or hide the unique labels column, which shows only non-common labels.
• Common labels - Show or hide the common labels.
• Wrap lines - Toggle line wrapping.
• Prettify JSON - Set this to true to pretty print all JSON logs. This setting does not affect logs in any format other than JSON.
• Enable log details - Toggle option to see the log details view for each log row. The default setting is true.
• Deduplication - Hides log messages that are duplicates of others shown according to criteria such as exact match, or those that only differ by numbers such as IPs or latencies.
• Order - Display results in descending or ascending time order. The default is Descending, showing the newest logs first. Set to Ascending to show the oldest log lines first.