Logs & live tail

Monitor → Logs shows every log line from your agents and your OpenTelemetry apps.

Search and filter

• Time range: 15 minutes, 1 hour, 4 hours, 24 hours or 7 days.
• Search: type text to find messages that contain it. The search ignores case and matches anywhere in the message.
• Side facets: Status, Service and Host, each with a count per value. Select several values in a facet to match any of them; selections in different facets must all match.
• Status buttons above the list give quick filters for critical, error, warning, info and debug.
• Histogram: event volume over the selected range, colored by status. It's a fast way to spot spikes.

Click a row to expand it and see the full message, its file path and its tags. For logs from OpenTelemetry, a View trace → link opens the related trace.

Load older logs at the bottom of the list fetches the next page.

Live tail

Click Live tail to stream new lines as they arrive, using the filters you've set.

Control	Action
Pause / Resume	Freezes the view so you can read; new lines are held back.
Clear	Empties the list.
Stop	Returns to normal search.

Log fields

Field	Source
Time	When the agent read the line, or the OTel record's timestamp
Status	critical, error, warning, info or debug. See Status.
Service	The name in the service file, or service.name for OTel
Host	The agent's hostname, or host.name for OTel
Path	The file the line came from
Tags	Host tags, service tags, and source:otel / env: for OTel
Message	The line, or the joined multiline event

Retention

Logs are kept for 7 days by default, then deleted automatically. Your Logcore administrator can change this.

Tips

• If a service is too noisy, drop its noise at the source with exclude. This keeps the dashboard fast and saves bandwidth.
• Give services clear names (checkout-api, not app). The name is what you filter by.
• Use monitors so you don't have to watch the screen.