Query log data in the Grepr data lake
Grepr provides multiple query interfaces to search and analyze log data stored in your Grepr data lake. You can use familiar query languages from popular observability platforms, making it easy to migrate existing queries or integrate with existing workflows. Each query interface supports different search patterns and filtering capabilities, enabling you to select the most suitable tool for your specific analysis needs.
To use these query interfaces, you can use the Data Explorer in the Grepr UI, the Grepr CLI, or the REST API.
To access the Data Explorer, from the Grepr UI home page, click Logs in the top navigation and select a dataset from the menu.
To use the Grepr CLI or REST API, see The Grepr CLI or Create and manage jobs with the Grepr REST API.
Search logs using a Datadog-like query syntax
You can search and filter logs using Datadog’s familiar query syntax. This interface supports full-text search across message fields, including wildcard matching, phrase searches, and field-specific queries, tag filtering with case-sensitive matching, attribute queries using the @ symbol, and boolean operators for complex searches.
See Search logs using a Datadog-like syntax.
Search logs using a Splunk Processing Language (SPL)-like syntax
You can run basic search operations and piped queries using a syntax similar to a subset of SPL. This interface is useful for users familiar with Splunk’s search patterns who want to apply similar query logic to filter and analyze log data.
See Search log data using an SPL-like syntax.
Search logs using the New Relic Lucene-like syntax
You can search logs using a syntax similar to New Relic’s Lucene-based syntax. Support for this syntax provides a familiar search experience for users of the New Relic Lucene syntax.
See Search logs using a New Relic Lucene-like syntax.
Limitations
- For some of the supported query interfaces, Grepr supports only a subset of the interface’s functionality. To learn more about the limitations, see the documentation pages for each interface.