Graphing Logs

LogDNA graphing 2.0 is here! Learn how to graph logs for easy log monitoring and visualization.

This guide covers how to use the Graphs feature accessible via the graphs tab in the top left of the LogDNA web app. Please note that at the time of writing, our visualization features are currently in public beta.

Terminology

  • Board: A collection of graphs and breakdowns
  • Graph: A set of plots visualized over time
  • Plot: A single query plotted on a graph
  • Breakdown: A distribution of field values for a set of plots in a graph
  • Filter: A query used to refine results for plots

Boards

A board is a named collection of graphs and is similar to a view. All boards are located in the Boards List and may contain any number of graphs. Changes made to a board are automatically saved.

Managing a board

  • Create a board: Click the New Board text at the top of the Boards List.
  • Duplicate a board: Click the Duplicate Board text at the top of the board
  • Delete a board: Click the Delete Board text at the top of the board
  • Filter a board: Click the funnel icon at the top of the board and type query to filter all plots on all graphs by this filter
  • Set a timeframe: Click the time duration in the top right and select a preset duration or a custom range to set a time range for all graphs in this board

Starring boards

Similar to views, all of your users have access to all boards in your account. Each user can star boards in their Board List by mousing over the board and clicking the star icon. Your board will appear at the top of the Board List under the Starred category.

Graphs

A graph is a visual representation of your parsed log data over time. For each graph, you can adjust the name, color, and dataset filter.

Creating a graph

  1. Ensure you are inside a board.
  2. Click the Add a Graph button at the bottom of the page.
  3. Select a field to plot.
  4. For string fields, count is the only possible metric for plotting values . However, for numeric fields, you can choose counts, min, max, average, sum, diff, or select percentiles. For more details, see Understanding Metrics.
  5. Optionally filter your dataset using our standard search syntax. For numeric fields, you can find filtering under Advanced Filtering.
  6. Click the Add a Graph button.

Add another plot to a graph

  1. Ensure you are in a board with an existing graph.
  2. Under the graph, click the + Add Plot button
  3. Select a field to plot
  4. Optionally select a value or apply an advanced filter
  5. Click the Save button to add the new plot to graph

Managing a graph

At the top of the graph you can modify the following properties (from left to right)

  • Name a graph: Click the pencil icon* to edit the graph name
  • Set the metric function: Select the drop down menu and choose a metric used to plot the data
  • Filter a graph: Click the funnel icon and type a query to add a filter to all plots in the graph
  • Duplicate a graph: Click the two overlapping squares icon
  • Delete a graph: Click the trash can icon
  • Reorder a graph: Click the up or down arrow to reorder a graph's position within the board

Interacting with a graph

There are a number of ways to interact with a graph to gleam meaningful information.

  • Mouse over a graph to see the value of each plot at that point in time
  • Click a point in the graph and select the Show Logs button to jump to those logs
  • Click and drag on a graph to select an area to zoom in on

Managing plots

All the plots are listed underneath their corresponding graph to the right of the line color used to represent that plot.

  • Click on the downward arrow next to a plot to Edit, Delete, or Hide a plot
  • Click on the circle next to a plot to change that plot's line color

Breakdowns

A breakdown is a cross-sectional field value distribution of the aggregated plots in your graph. For example, to see the distribution of request values for the HTTP response codes on a graph, create a breakdown for that graph on the request field.

Adding a breakdown to a graph

  1. Locate a graph you wish to create a breakdown for.
  2. Expand the downward arrow under the center of the graph
  3. Select a breakdown type (e.g. histogram)
  4. Choose a field to distribute values on (e.g. request)
  5. Click the Add Breakdown button

Adding another breakdown to a graph

  1. Locate a graph you wish to create another breakdown for
  2. Expand the downward arrow under the center of the graph
  3. Click the + Add button on the right
  4. Select a breakdown type (e.g. histogram)
  5. Choose a field to distribute values on (e.g. verb)
  6. Click the Add Breakdown button

Interacting with a breakdown

There are a number of ways to interact with a breakdown to gleam meaningful information.

  • Mouse over a breakdown bar to view the values for that bar
  • If there is more than one breakdown for a graph, click on the left and right arrows in the top left of the breakdown to rotate through the breakdowns for that graph. You can also click on the circles at the bottom to select the position of a particular breakdown in the carousel

Deleting a breakdown from a graph

  1. Locate a graph you wish to delete the breakdown for
  2. Expand the downward arrow under the center of the graph
  3. If there is more than one breakdown for this graph, use the arrows in the top left to rotate to the desired breakdown
  4. Click the x Delete button on the right

Filters

A filter is a refined query that can be applied to a plot, graph, or board

  • Plot filter: A refined query only applied to that plot. Depending on the plotted field, it may be located under the Advanced Filtering option for that plot (see Managing Plots for more details).
  • Graph filter: A refined query applied to all plots on that graph. Click the funnel icon in the top left of the graph to set a graph filter.
  • Board filter: A refined query applied to all plots in all graphs on that board. Click the text box next to the funnel icon in the top left of the board to set a board filter.

Understanding metrics

A metric is an aggregate function that transforms a graphed dataset in particular way. While you can graph any parsed field, only numeric fields can utilize the full list of metric functions. All metric functions only apply to data that contains the selected field and matches the applied dataset filter.

  • Counts: Counts the number of lines in each interval. This is the only metric function that can be applied to string fields.
  • Min: Returns the lowest value for each interval.
  • Max: Returns the highest value for each interval.
  • Average: Returns the average value for each interval
  • Sum: Returns the sum of values for each interval
  • Diff: Returns the largest difference between values for each interval
  • Percentiles: Returns the Nth percentile of a set of values for each interval. You can choose from the 75th, 85th, 95th, and 99th percentile presets.

Graphing Logs

LogDNA graphing 2.0 is here! Learn how to graph logs for easy log monitoring and visualization.