Search

Prev Next

Available in Classic and VPC

In Search, you can use various search features to view desired data and export the search results to Object Storage.

Search interface

The basic description for the Search menu to use Cloud Log Analytics is as follows:
cla-use-search-screen_ko

Component Description
① Menu name Shows the current menu name and number of logs being viewed.
② Basic features Export to Object Storage with the viewed log, Check details of Cloud Log Analytics, Log in check Download in Excel, Refresh
③ Log search tab menu Select log search between Keyword search and Lucene Query search
④ Search feature
  • Search logs by selecting or specifying the time the log occurred
  • Select the number of logs to output per page by search results, navigate to page
Log Count Search results data by time of day
  • Search by time when clicking on a bar in a bar graph
Selected field The names of the fields in the search results data, and how many types of unduplicated data each field has
  • Click a field to display the five data points that the field has, in order of the highest number of data points
  • Click a field data to display [Lucene Query Search] tabbed menu interface with a filter added for the value
  • [Add fields]: Set to display only the fields you want
Search result Show original messages in search result data
  • Show details when clicking on data
⑧ Data display tab menu It displays the search result data in Table or Json format.
⑨ Filter Displays the [Lucene Query Search] tabbed menu interface with the filter applied when clicked
  • i-cla-plus: Include the value
  • i-cla-minus: Exclude the value
  • i-cla-star: Include the following fields

Log Search

You can view desired log data by combining various filters and keywords. You can select between Keyword Search and Lucene Query Search.

  • The Dashboard displays all data collected over the past 30 days.

Keyword search

The following describes how to search for log data using a keyword.

  1. From the NAVER Cloud Platform console, click i_menu > Services > Management & Governance > Cloud Log Analytics menu in order.
  2. Click the Search menu.
  3. Click the [Keyword Search] tab.
  4. Please use the filter feature or enter keywords and click on the i-cla-find to search and see the results.
    • Select a log type: Select the log type for the data you want to retrieve
    • Log occurrence time: Select the log occurrence time of the data you want to search for or enter it manually

Lucene Query search

You can search by specifying a field using the Lucene query. You can also search efficiently by utilizing Boolean operators and wildcards(*).

The following describes how to search for the log data using the Lucene query.

  1. From the NAVER Cloud Platform console, click i_menu > Services > Management & Governance > Cloud Log Analytics menu in order.
  2. Click the Search menu.
  3. Click the [Lucene Query search] tab.
  4. Use the filter feature or input Lucene Query and click the [Execute Query] button to search and check the results.
    • Log occurrence time: Select the log occurrence time of the data you want to search for or enter it manually
    • [Add filter]: Search data with specific field condition
Note

Collected logs have the following fields in common.

  • @timestamp: The time the log arrived on the server
  • beat.hostname, host.name, hostname: Hostname of the server where the log occurred
  • message: Contents of the log

Export to Object Storage

The viewed log data can be exported to Object Storage.

  • To export to Object Storage, you must first sign up for Object Storage and create a bucket in the same region. For more information on Object Storage, see the Object Storage user guide.
  • The exported data is saved in JSON format.
  • If the data is more than one GB, it is divided into one GB units and saved in the same folder.
  • The process takes approximately ten minutes per one GB and may vary depending on circumstances.
  • More features will be provided later, such as CSV format, zip storage, and data storage by date.

Here's how to export the log data you're viewing to Object Storage.

  1. From the NAVER Cloud Platform console, click i_menu > Services > Management & Governance > Cloud Log Analytics menu in order.
  2. Click the Search menu.
  3. After retrieving the data, click the [Export to Object Storage] button.
  4. When the Export to Object Storage pop-up appears, select the bucket to export the search results to from Object Storage.
  5. Click the [Export to Object Storage] button.
  6. Click the [OK] button.
    • Click the [Export Log Shortcut] button to move to the Export Log where you can check the export progress and history. For more information on the Export Log menu, see Export Log.
Note
  • The base time for time values (@timestamp) in files downloaded from search results export and automatic export, or downloaded to Object Storage is UTC.
  • When using the time value (@timestamp), consider the standard time of the country you are currently in use (Example: Korea, UTC+09:00).

Download in Excel

The following describes how to download the data you're viewing after a search as an excel file.

Note

You can only download the data displayed on the interface and downloading the entire data will be supported in the future.

  1. From the NAVER Cloud Platform console, click i_menu > Services > Management & Governance > Cloud Log Analytics menu in order.
  2. Click the Search menu.
  3. After searching the data, click the [Download] button.
    • An excel file recorded with data by field is downloaded.