Skip to main content

​
Overview

Live Tail lets you watch logs flow through your pipeline in real-time, before and after each processor block—so you can validate filters, troubleshoot issues, and confirm that optimizations behave as expected.
Live Tail shows a sample of incoming events to reduce bandwidth and keep the UI responsive.

​
Open Live Tail

Live tail can be accessed in many parts of the application
  • Top level navigation menu - Live Tail tab
  • Inside a pipeline (Live Tab), at each pipeline path
  • Building a processor
  • Deployed processor page
When accessed from the top navigation menu, Live Tail displays telemetry data from the midpoint of the pipeline, prior to processing by any configured processors.

​
Live Stream View

When Live Tail opens, a sampled stream of logs begins scrolling.
  • Each row contains the timestamp , severity of the entire log entry.
  • Expand a log line to see the full structured payload. Expanding pauses the stream; collapsing resumes it.
  • Use the Pause / Start button in the upper‑right corner to control the stream manually.

​
Filtering the Stream

  1. Click Add Condition in the filter section.
  2. Choose a field (attribute, resource, body, or severity).
  3. Select an operator (equals, contains, regex, etc.).
  4. Enter a value and press Enter.
Live Tail automatically re‑evaluates the stream whenever filters change. Multiple conditions are combined with AND logic by default. Select Match any to use OR.
Filters are evaluated client‑side on the sampled stream; they don’t change what the collector ingests.

​
Expanded Log View Options

When you expand a log entry to view all its keys and values, a context menu appears on hover to the left of each row:
  1. Copy Value – copy just the value to your clipboard.
  2. Copy Key & Value – copy the pair in key=value form.
  3. Generate Regex - generate and copy a regex pattern matching the value (may take ~1s)
  4. Generate Grok Pattern - generate and copy a grok pattern matching the value (may take ~1s)
  5. Show Logs with This Value – add an equals filter for this field to the Live Tail filter bar.
  6. Exclude Logs with This Value – add a not equals filter for this field.
To copy the entire log line as formatted JSON, click the Copy JSON icon in the upper‑right corner of the expanded view. To debug and understand which processors will impact a specific log line., click on Processors Impacting This Log Button from the upper‑right corner
Processors Impacting This Log is available only from the top level navigation live-tail