This document describes how to display project-scoped log entries on a custom dashboard. By default, when you add a logs panel widget to a custom dashboard, it displays the most recent log entries in your current Google Cloud project. However, you can configure the logs panel to display log entries stored in Cloud projects accessible through the current metrics scope.
When you add a logs panel to a custom dashboard, you can view log entries in the same context as your metrics. Because the logs panel lets you filter your log entries, you can configure it to display only those log entries that are of interest to you.
Logs Explorer and logs panels
Logs Explorer is the standard way to investigate logs. Logs panels don't replace Logs Explorer; instead, they provide a way to view log entries in the same context as your metrics.
Logs panels display key fields of log entries, they don't display the complete log entry. For information about how to view all fields of a log entry, see View log with Logs Explorer.
Logs panels are preconfigured to show log entries stored in your current Cloud project. However, you can configure a logs panel to show log entries that are stored in any project in the current metrics scope.
Logs panels support the same query language as Logs Explorer.
Logs panels show each log entry on a single row that contains a severity indicator, a timestamp, and information about the log entry. The type of log entry determines what information the logs panel displays. For example, the following example shows two log entries:
In the previous example, the information field for the second entry is the
Unable to read control message. Shutting down. However, for the first
entry, information about the service, an email address, and
a string-formatted version of the JSON structure of the log entry are shown.
For general information about Cloud Logging, see the following resources:
Before you begin
Dashboards don't display log entries for projects for which you don't have viewing permission. For each project whose log entries you want to view, ensure that one of the following is true:
- You have the Logs Viewer
For custom roles, you have the following permissions:
Add a logs panel
These instructions are for the Google Cloud console. For information about adding
a logs panel to a dashboard by using the Cloud Monitoring API, see
Dashboard with a
To add a logs panel to the dashboard by using the console, do the following:
In the Google Cloud console, select Monitoring or click the following button:
Go to Monitoring
In the Monitoring navigation panel, select Dashboards:
- To create a new dashboard, select Create dashboard.
- To update an existing dashboard, find the dashboard in the list of all dashboards and select its name.
If the edit Edit dashboard button is shown, then click it.
Select Logs panel in the Chart library.
A preconfigured logs panel is added to your custom dashboard. The following example illustrates a logs panel:
As shown in the previous example, the logs panel displays a table of log entries and a link to Logs Explorer. The logs panel also displays a Severity menu and a filter bar. The display also includes a Show query chip when you have configured a query.
(Optional) To temporarily change which log entries the logs panel displays, use the Severity menu and a filter bar.
(Optional) Modify the size or position of the logs panel by using your pointer.
(Optional) Modify the saved configuration of the logs panel. For more information, see the section Configure a logs panel.
Configure a logs panel
Logs panels are preconfigured to display all log entries stored in the current Cloud project. However, you might only be interested in log entries that indicate some type of error condition, or you might want to view logs for multiple projects. This section describes how to modify the default configuration of a logs panel.
To configure the title, the list of projects whose logs are shown, or to enter a query, do the following:
If the edit Edit dashboard button is shown, then click it.
Select an existing logs panel.
The logs panel configuration pane is expanded. The following example illustrates this pane:
(Optional) Replace the default title with a descriptive title. The title is shown on the logs panel.
(Optional) Configure the logs panel to display metrics from multiple Cloud projects. By default, only log entries from the current Cloud project are shown. However, a logs panel can display logs for any Cloud project accessible through the current metrics scope.
When you don't have permission to view logs for a Cloud project, the Projects menu displays the message "You don't have permission to view logs in this project." To resolve the permission error, contact your system administrator and ask them to grant you the Logs Viewer (
roles/logging.viewer) role on the project.
(Optional) Restrict which logs the logs panel displays by configuring a query in the Query Editor field. After you configure a query, select Apply filter.
To populate the Query Editor field, you can enter text into the field or you can make selections from menus. The Query Editor field uses the same query language as Logs Explorer. For troubleshooting information, see Syntax issues.
The Severity and Log name menus let you select multiple options. The following is an example of a query statement that matches multiple severity levels:
severity=(WARNING OR ERROR OR CRITICAL OR ALERT OR EMERGENCY)
The Resource menu activates additional menus and an Add button after you select an individual resource. This menu lets you select a resource type, a service for a specific resource type, or a method for a service for a resource type. For example, to add a clause for the audited resource type, select Audited Resource and then select Add. These steps add the following clause to the Query Editor field:
Similarly, to add a clause for a specific service that is audited, select Audited Resource, select the service from the All service menu, and then select Add. The following is an example of a clause that is created by using this approach:
Filter log entries by date
To display the most recent logs in a logs panel, use the time fields in the dashboard toolbar. For example, select 1H. Provided you don't select a custom time range, the logs panel always displays the most recent logs, even when they are older than the selected time window.
When you are investigating an incident, you might want to restrict the log entries to those entries that are in a specific time interval. To configure the log entries to on show logs that are in a fixed time interval, do one or both of the following:
- Select a custom time range in the dashboard toolbar.
- Enter a
timestampclause in the Query Editor field of the configuration pane, and then select Apply filter.
When you specify a time interval, the logs panel isn't automatically refreshed.
Filter log entries by severity
When you are monitoring debugging a failure situation, you might only want to view error messages, and hide from the display all other logs entries. To configure a logs panel to display only those log entries that satisfy specific severity levels, do one or both of the following:
To apply a temporary filter, select a value for the Severity menu in the logs panel. This menu specifies a minimum severity level. For example, a value of "Warning" results in log entries with a severity of "Error" being retrieved, but those log entries with a severity of "Notice" aren't retrieved. By default, the value for this field is set to
Default, which includes all log entries.
The setting for the Severity menu is discarded when you navigate away from the dashboard.
To apply a permanent filter, enter a
severityclause in the Query Editor field of the configuration pane, and then select Apply filter.
Filter log entries by a string or phrase
Filtering log entries by a specific string or phrase lets you eliminate from view log entries that aren't of interest. For example, to view log entries that include a specific email address, you can filter by that address.
To apply a temporary filter so that you view only those log entries that contain a specific word or phrase, use the filter_list Filter field. The contains-test is case insensitive.
If you add multiple filters, then only logs that match all filters are shown because an implicit
ANDis inserted between adjacent filters. However, you can explicitly insert an
For example, when you add the filters
Compute, log entries that contain both words are shown.
For example, when you add the filters
Compute, log entries that contain
The value of the filter_list Filter field isn't persistent.
To apply a permanent filter, modify the query stored in the Query Editor field, and then select Apply filter. For information about the query syntax, see Logging query language.
For example, to display only those log entries with a
MESSAGEfield whose value contains the string "lamp", add the clause
jsonPayload.MESSAGE:"lamp"to the Query Editor field.
Here are some sample configurations:
To view the most recent logs, set the dashboard toolbar to 1H, leave the Query Editor field empty, and leave the logs panel fields at their default values.
To temporarily display only logs with a severity level of at least "Warning", select Warning in the logs panel Severity menu.
The value of the logs panel Severity menu is reset to Default when you refresh the page or navigate away from the dashboard.
To configure the logs panel to only show logs that have severity level of "Warning", in the Query Editor field, add the clause
The query stored in the Query Editor field is saved. Even when you refresh the page or reload the dashboard, the logs panel only shows logs that match the specified warning level.
To configure the logs panel to show only Compute Engine instance logs, in the Query Editor field, add the clause
The message "No entries found matching current filter" is shown when no log entries satisfy the current settings. When you configure a query in the Query Editor field and also set the logs panel filters, it's possible that the settings conflict. For more information, see Logs panel displays "No entries found" message.
View log entries in Logs Explorer
Logs panels display key fields of log entries, they don't display the complete log entry. To examine all fields of a log entry, do the following:
- Select View in Logs Explorer in the logs panel.
In the dialog, select the Google Cloud project in which to open Logs Explorer.
Logs Explorer is opened in a new browser tab, and the filters you've selected in the logs panel are automatically applied.
Select the log entry that you want to view.
- Logs panel indicates it displays partial data
- Logs panel reports invalid query
- Logs panel displays "No entries found" message
For information about how Cloud Monitoring provides visibility to metrics and logs stored in multiple Cloud projects, see metrics scope.
For information about how to configure a logs panel by using the Cloud Monitoring API, see Dashboard with a