This topic describes the limits of query and analysis in Log Service.

Query

Item Description Remarks
Number of keywords The number of keywords that are used as search conditions. The number of logical operators is not included. You can specify up to 30 keywords in a search statement. None
Size of a field value The maximum size of a field value is 10 KB. The excess part is not involved in searching. If the size of a field value is greater than 10 KB, logs may fail to be obtained by using keywords, but the logs are actually stored in the Logstore.
Maximum number of concurrent search statements Each project supports up to 100 concurrent search statements. For example, 100 users can concurrently execute search statements in all Logstores of a project.
Returned result The returned logs are displayed on multiple pages. Each page displays up to 100 logs. None
Maximum size of a log Log Service performs the Document Object Model (DOM) operation only on the first 10,000 characters of a log due to browser performance limits. If a log contains more than 10,000 characters, the following message appears in the Log Service console: The log contains log data of more than 10,000 characters, and some display will be downgraded.
Fuzzy search In a fuzzy search, Log Service matches up to 100 words that meet the specified conditions and returns the logs that meet the search conditions and contain one or more of these words. For more information, see Fuzzy search. None
Data sorting in search results By default, search results are displayed in descending order of time, which is accurate to minutes. None

Analytics

Item Standard SQL Dedicated SQL
Number of concurrent analytic statements Each project supports a maximum of 15 concurrent analytic statements.

For example, 15 users can concurrently execute analytic statements in all Logstores of a project.

Each project supports a maximum of 100 concurrent analytic statements.

For example, 100 users can concurrently execute analytic statements in all Logstores of a project.

Data volume Each shard supports only 1 GB of data for a single analytic statement. An analytic statement can scan a maximum of 200 billion rows of data at the same time.
Method to enable By default, Standard SQL is enabled. A switch is provided for you to manually enable Dedicated SQL. For more information, see Enable Dedicated SQL.
Resource usage fee Free of charge. You are charged based on the actual CPU time. For more information, see Billable items.
Applicable scope You can analyze only the data that is written to Log Service after the log analysis feature is enabled.

If you want to analyze historical data, you must reindex the historical data. For more information, see Reindex logs for a Logstore.

You can analyze only the data that is written to Log Service after the log analysis feature is enabled.

If you want to analyze historical data, you must reindex the historical data. For more information, see Reindex logs for a Logstore.

Returned result By default, an analytic statement returns a maximum of 100 rows of data.

If you want to view more data, use a LIMIT clause. For more information, see LIMIT clause.

By default, an analytic statement returns a maximum of 100 rows of data.

If you want to view more data, use a LIMIT clause. For more information, see LIMIT clause.

Size of a field value The log analysis feature can analyze a maximum of 16,384 bytes (16 KB) of data in the value of each field. If the size of a field value exceeds 16 KB, the excess content is not analyzed.

You can change the maximum size for each field value when you configure indexes. Valid values: 64 to 16384. Unit: bytes. For more information, see Configure indexes.

The log analysis feature can analyze a maximum of 16,384 bytes (16 KB) of data in the value of each field. If the size of a field value exceeds 16 KB, the excess content is not analyzed.

You can change the maximum size for each field value when you configure indexes. Valid values: 64 to 16384. Unit: bytes. For more information, see Configure indexes.

Timeout period The maximum timeout period for a single analytic statement is 55 seconds. The maximum timeout period for a single analytic statement is 55 seconds.
Number of decimal places in the value of a double-type field The value of a double-type field can contain a maximum of 52 decimal places.

If the number of decimal places is greater than 52, the accuracy of the field value is compromised.

The value of a double-type field can contain a maximum of 52 decimal places.

If the number of decimal places is greater than 52, the accuracy of the field value is compromised.