Scan logs

Procedure

1. Log on to the Simple Log Service console.

2. In the Projects section, click the one you want.

   

3. On the Log Storage > Logstores tab, click the logstore you want.

   

4. In the search box, enter a scan statement.

   Supported formats: Query statement | SPL statement or Query statement | set session mode=scan; Analytic statement (Standard SQL).

5. In the upper-right corner, set the time range.

   You can set a relative time, a time frame, or a custom time range. Minimum granularity: one minute.

Automatic scanning

If No results found for this scan appears after a scan query, click the icon. The system automatically scans until it finds matching logs or reaches 20 attempts.

The Automatic Scanning dialog box shows the scan progress.

Pagination

When you turn a page, SLS runs another scan to ensure continuous results.

Each scan processes up to 100,000 logs. A page may return fewer results than the Items per Page value, but you can still go to the next page. This means fewer than Items per Page matching logs were found in the current 100,000-log batch.

For example, with 200,000 total logs and Items per Page set to 20, one scan may return only 15 logs while the next page button remains active. This means only 15 of the first 100,000 logs matched. Click next to scan the remaining 100,000 logs.

Examples

• Query logs for successful requests.

  • Scan statement

    * | where Status='Success'

  • Scan results

• Query logs for a specific file at a specific time.

  • Scan statement

    * | where file = 'file:Android' | where time ='[2024-04-24T10:07:27.427014479]'

  • Scan results

• Count requests by status.

  • Scan statement

    Note

    Scan analysis requires set session mode=scan; before the SQL statement.

    * | set session mode=scan; SELECT Status, count(*) AS PV GROUP BY Status

  • Scan results

API calls