Basic questions for log query

Last Updated: Nov 29, 2017

What methods does Log Service provide for you to query collected logs?

Log Service provides three log query methods:

  1. Log Service console. For details, see Query logs.
  2. SDKs (available in C++, Java, PHP, .Net, and Python). For details, see SDKs.
  3. RESTful APIs. For details, see API.

What query capabilities does Log Service provide?

  1. Query by a combination of criteria. For details about the query syntax, see LogSearch syntax.
  2. Query 10 million logs at a time. Based on the criteria you specified, you can query the logs, read the time-based distribution of matched logs or obtain the raw logs.
  3. Caching of queried logs, allowing you to get better results for a second query by the same criteria.

What are the constraints of LogSearch?

  1. Log Service supports queries based on a combination of up to 10 keywords.
  2. Up to 100 lines of raw data is returned for a single query.
  3. Up to 10 million lines of data is processed in a single query.

What if no query results are returned?

  1. Go to the Logstore List page, find the Log Consumption column in Log Consumption Mode, click Preview, and select ShardID to check whether data exists.
    • If data exists, return to the Query page of the Log Index column. Click the Topic text box next to the Keyword search box, and check for topics.
      • If topics exist, select a topic and click Query to check whether data exists.
      • If neither topics nor data exists after you click Query, open a ticket.
    • If no data exists, check whether the collected data is complete.
Thank you! We've received your feedback.