Slide 2 of 8

What is Grafana Logs Drilldown?

What is Logs Drilldown?

Grafana Logs Drilldown is a queryless interface for exploring logs that enables automatic visualization and exploration without writing LogQL.

How it works

Logs Drilldown automatically detects structure in your logs:

  • Labels that index logs (job, instance, namespace)
  • Parsed fields extracted from log messages (level, status_code, user_id)
  • The actual log message content
  • Timestamp of when logs were emitted

Core capabilities

  • Narrow to specific services or systems
  • Find logs matching certain patterns or field values
  • Look for specific messages or errors
  • Observe log distribution over time
  • Save, share, and resume explorations
  • Create dashboards and alerts from findings

Script

Grafana Logs Drilldown is a queryless interface for exploring logs. It’s designed to simplify log exploration by removing the need to write LogQL queries.

When logs are accessible in Grafana, Logs Drilldown automatically detects fields and labels in your log data. You can filter by these fields, search for text patterns, and analyze log volumes without query syntax.

The interface works similarly to Metrics Drilldown. You start with your log streams, apply filters to narrow down what you’re looking at, and search for specific text or patterns. The logs appear in a readable format with detected fields highlighted.

This makes log investigation accessible to everyone. You don’t need to know LogQL label matchers or regular expression syntax. You click on what you want to filter by and type what you want to search for.

/
Previous Next