Live tail
Stream logs as they arrive, with the same search language as the explorer.
Live tail #
Live tail streams matching logs to your browser as they arrive. The filter is the same query language as the explorer, so anything you can search you can also watch.
Opening a tail #
- Open Logs and switch to Live.
- Enter a query, or leave it empty to follow everything.
- Logs appear as they arrive, newest last.
While tailing #
- Pause stops the stream; scrolling back does not lose what already arrived.
- Resume continues from the newest log rather than replaying the pause.
- The header shows the current rate, so a noisy service is visible immediately.
- Leaving the page closes the stream.
Time range #
A tail follows the present moment. For a fixed window with paging and facets, use the explorer instead.
Writing a useful tail query #
Tailing a broad query on a busy service produces more than you can read. Narrow by service and severity, then widen when you need more context.
service:checkout status:error— errors from one service.- service:checkout NOT status:debug` — everything but debug noise.
@payment.provider:stripe— one integration across all services.
Tails are live views
A tail holds an open connection for as long as you watch. On a high-volume query, a narrower filter keeps the connection light.
Open a tail while you reproduce a problem. The filter stays as you type, so you can start broad and narrow until the interesting records stand out.