Live Tail
Live Tail gives you a live view of your logs as they come into Logz.io, eliminating the need to SSH into a remote machine.
The live tail configuration is set to close the session after 10 minutes of inactivity. "Inactivity" is defined as either the system not finding the specified log you've filtered for within 10 minutes or the user not interacting with the page during that same period.
Live Tail basics - Start, stop, scroll, and clear
- Click Logs > Live tail
- To start Live Tail, press play.
- To display only filtered results, type a regex in the Match and Ignore boxes and press Enter. Log lines that meet your Match and Ignore criteria are shown in real time. More on the parsed data view below. 👇
- To end the Live Tail session, press stop.
- To pause, scroll with your mouse or trackpad. The session remains active, and logs continue to load, but scrolling is paused. Press scroll to view the bottom of the tail and resume scrolling.
- To clear the Live Tail view, click clear.
The Raw data view shows the value of the log message fields as they enter the log management queue. To view a live tail of logs without the message field, use the Parsed data view.
Find and highlight terms
- To show all instances of a term in yellow, use the Find box.
- To highlight different phrases, click settings, and then type the word or phrase you want to highlight. Click X on a highlighted term to remove it.
Live Tail parsed data view
The parsed data view divides logs into columns, saving you from having to visually scan entire lines of raw text.
When switching to the parsed data view, you'll see the @timestamp
and message
columns.
- To add a new column, click + (to the right of the table heading row), choose a field to show in the new column, and click Apply.
- To remove a column, hover over the column header and click X.
- To move a column left or right, hover over the column header and click < or > .
- To add a new filter to your session, click Add a filter, choose a field and filter condition, and then click Apply. Click a filter to edit it, or click X on that filter to remove it.
Troubleshooting Live Tail
In case you encounter the following error when trying to use Live Tail:
Error: The amount of logs you've asked to tail is too large, please refine your filter. [6429]
It indicates that the buffer is running at high speed, and the browser can't process and display the data. Refine your search using filters as shown in the previous section to resolve it. If you've added filters but still encounter an issue when running Live Tail, contact the Logz.io Support team for additional help.