Section 3 · Logs Drilldown

Filter logs by labels, fields, and text

Estimated time: 1 min

How to find and filter logs

Your logs already have three layers you can filter by: labels, fields, and text.

Log organization structure showing labels, fields, and text

The three layers

LayerWhat it containsExample
LabelsIndex identifying the log streamjob="api", instance="server-01"
FieldsAdditional metadata and parsed fields from the log messagelevel="error", status_code="500"
Text contentThe actual log message“Connection timeout to database”

Filtering strategy

Use all three layers together for precise investigation:

  1. Filter by labels to narrow to specific services or systems.
  2. Filter by fields to focus on certain attributes from the logs, such as log level, status code, or other structured data.
  3. Search text to find specific messages or error patterns.