Skip to main content

Documentation Index

Fetch the complete documentation index at: https://controlplanecorporation-tamir-docs-improvements.mintlify.app/llms.txt

Use this file to discover all available pages before exploring further.

Overview

The Logs UI aggregates and displays logs for running workloads across all configured cloud providers and regions and the logs will be aggregated and displayed as if they were running at one provider/region. Use filters to narrow any issues that might be occurring at a specific workload. The Grafana explorer can be used to query, visualize, and analyze log data.

LogQL

The Control Plane logs use the LogQL query language to query your log data. The documentation for LogQL is available in the LogQL documentation. The following labels that can be used to create a query are:
  • container
  • gvc
  • location
  • replica
  • stream
  • workload

Log Filters

Query results can be filtered by the following:
  • Location
  • Container
  • Start date and optional end date (the date/time selector includes helper buttons ranging from the Last 5 minutes to the Last 30 days)
Selecting a location or container automatically add the value to the LogQL query.

Live Logs

Log streams can be viewed in real time using the Live option. After entering the desired query, click Live to begin streaming logs. Click Stop to end the live stream.

Grafana

Clicking on the Explore on Grafana link will launch the Grafana UI in a new tab. When clicking the button from a specific workload, the query will be prefilled with the GVC and workload. Grafana gives you the ability to “Explore your data through ad-hoc queries and dynamic drill-down. Split view and compare different time ranges, queries, and data sources side by side.” View the Grafana Explore documentation. Below is a sample of the Grafana UI after executing a query:
Grafana log explorer showing LogQL query results with timestamp, level, and message fields for workload logs

Example LogQL Queries

Query
{gvc="GVC_NAME", workload="WORKLOAD_NAME"}
  • Access logs with error
Query
{gvc="GVC_NAME", workload="WORKLOAD_NAME", container="_accesslog"}  |= "\" 50"
  • Graph of access logs with error by replica
Query
sum(count_over_time({gvc="GVC_NAME", workload="WORKLOAD_NAME", container="_accesslog"}  |= "\" 50"[1m])) by (replica)
  • Graph of access logs with error by workload
Query
sum(count_over_time({gvc="GVC_NAME", container="_accesslog"}  |= "\" 50"[1m])) by (workload)
  • View the logs for a GVC, workload, location, and container
Query
{gvc="GVC_NAME", workload="WORKLOAD_NAME", location="aws-eu-central-1", container="CONTAINER_NAME"}
  • View logs across all workloads and GVCs
Query
{gvc=~".+"}
  • Count of inbound requests by ip
This query will produce a count of inbound requests grouped by source ip address over the last 10 minutes. Set the Grafana query type to Instant so the results can be returned as a sortable list.
Query
sum(count_over_time({gvc="GVC_NAME", workload="WORKLOAD_NAME", container="_accesslog"} | logfmt | regexp "(?P<ip>\\d+\\.\\d+\\.\\d+\\.\\d+)"[10m])) by (ip)
  • Count of inbound requests by path
This query returns the count of inbound requests grouped by request path for the last 10 minutes where latency exceeds 100ms. Set the Grafana query type to Instant so the results can be returned as a sortable list.
Query
sum(count_over_time({gvc="GVC_NAME", workload="WORKLOAD_NAME", container="_accesslog"} | logfmt | regexp "(?P<path>\\/[^\"]*\\s).+\\d+ \\d+ \\d+ (?P<latency>\\d+) " | latency > 100 [10m])) by (workload, path)

Log Retention Policy

The log retention period for logs stored for 30 days by default and can be adjusted for each Org. Learn how to configure log shipping to an external provider.

CLI

To view the CLI documentation for logs, see the Logs CLI reference.