Logs

OpenObserve provides powerful log management capabilities for collecting, storing, and analyzing log data from your applications and infrastructure.

Overview

Logs in OpenObserve offer comprehensive observability into your system's behavior, allowing you to track events, debug issues, and monitor application performance. Built with high performance and cost efficiency in mind, OpenObserve handles log ingestion and querying at scale.

Key Features

Log Ingestion

• Multiple Protocols: Support for multiple ingestion methods including HTTP and integration with popular log shippers like Fluent Bit, Vector, etc.
• Structured & Unstructured: Handle both JSON structured logs and plain text logs
• Real-time Processing: Immediate indexing and availability for search and analysis

Search & Query

• Field Extraction: Automatic field detection and parsing for structured data. The Schema Settings tab in the Stream Details panel lets you inspect and manage the schema used to store and query ingested data.

• Full-text Search: Powerful search capabilities across all log fields

• SQL Queries: Use familiar SQL syntax for complex filtering and aggregation.

• Time-based Filtering: Query logs within specific time windows using absolute or relative ranges.

Storage & Performance

• Compressed Storage: Efficient compression reduces storage costs significantly

• Fast Retrieval: Optimized indexing for quick log searches and aggregations. Learn more about Streams and their details.

• Retention Policies: Configurable data retention to manage storage costs

Get started with logs

Ready to send your first logs to OpenObserve?

• Quickstart: get OpenObserve running in 5 minutes.
• Log ingestion overview: pick the right ingestion path for your stack.
• Example queries: copy-paste filters and SQL to try right away.

Next steps

• OpenTelemetry / OTLP: the recommended modern ingestion path.
• Vector, Fluent Bit, syslog: popular agent-based options.
• Schema settings: manage how your fields are stored and indexed.

Need some help?

• Join our Community Slack
• Or Contact support