Query log data in Grepr
Grepr provides multiple query interfaces to search and analyze log data stored in your data warehouse. You can use familiar query languages from popular observability platforms, making it easy to migrate existing queries or integrate with existing workflows. Each query interface supports different search patterns and filtering capabilities, allowing you to choose the most appropriate tool for your specific analysis needs.
Datadog queries
Use Datadog’s familiar query syntax for searching and filtering log data. This interface supports full-text search across message fields, tag filtering with case-sensitive matching, attribute queries using the @ symbol, and boolean operators for complex searches. The Datadog query language provides comprehensive search capabilities including wildcard matching, phrase searches, and field-specific queries that make it easy to find specific log entries or patterns.
See Query log data using Datadog syntax.
New Relic Query Language (NRQL)
Execute New Relic Query Language (NRQL) queries for filtering log data using New Relic’s query language syntax. Grepr supports a subset of NRQL focused specifically on log filtering operations with SELECT and WHERE clauses. This interface is ideal if you are already familiar with New Relic’s query patterns and want to apply similar filtering logic to your log data analysis. The implementation includes support for basic conditional filtering and attribute-based searches.
See Query log data using New Relic Lucene.
Splunk Processing Language (SPL)
Use Splunk Processing Language (SPL) for basic search operations and piped queries. Grepr provides limited SPL support focused on the search command, allowing you to perform text searches and chain multiple search stages using pipe operators. This interface is useful for users familiar with Splunk’s search patterns who want to apply similar query logic to filter and analyze log data.
See Search log data using Splunk Processing Language.
New Relic Lucene
Query logs using New Relic’s Lucene-based syntax for flexible text searches and field-based filtering. This interface supports text search against message fields, field-specific searches using field:value syntax, and logical operators for combining search conditions. The Lucene-based approach provides a familiar search experience for users accustomed to New Relic’s log query interface.
See Query log data using New Relic Lucene.
Limitations
- For some of the supported query interfaces, Grepr supports only a subset of the interface’s functionality. To learn more, see the documentation page for each interface.