Exploring and analyzing logs

According to your use case, you’ll either filter the log explorer for high-severity logs or rely on alert events for more complex situations.

To see logs in Centreon Log Management, you first need to configure an OpenTelemetry collector on each host you want to receive logs from.

Centreon Log Management gives you several ways to explore your data:

• The log explorer: search and filter logs to investigate issues and perform root-cause analysis.
• Alert events: see what's happening in real time and react quickly to incidents. (To get alert events, you need to create alert rules first.)
• Dashboards: view current and historical data visually to examine trends and understand changes over time.

In this section

Using the log explorer

The log explorer page allows you to search and filter logs so you can investigate issues and perform root-cause analysis.

Query syntax

Use queries in the Log Explorer page, in alert rules or in dashboards to filter your data and query OpenTelemetry attributes. The attributes you will be able to query will be the ones retrieved by your OpenTelemetry Collector, as you configured it. See What does a log entry in OpenTelemetry format look like? for an overview of the main attributes.

Creating dashboards

Dashboards are built using widgets. They allow you to display text, and charts that present the number of logs received according to specific parameters.