Explore BYOC Logs in Log Explorer

BYOC (Bring Your Own Cloud) Logs index names follow this format:

byoc--<CLUSTER_NAME>--<INDEX_NAME>

To search your BYOC Logs indexes:

1. Go to the Datadog Log Explorer.
2. On the left facet panel, under BYOC INDEXES, select one or more indexes to search.

You can select a specific index to narrow your search, or select all indexes in a cluster to search across them.

You can also search a specific index from the search bar by using its qualified name. For example, to search the application index in cluster-1:

index:byoc--cluster-1--application

Search across BYOC Logs clusters

Use Log Explorer, dashboards, log monitors, or the public Logs API to search across multiple BYOC Logs clusters with a single query. Results from the selected clusters are combined.

Use Log Explorer

In the Log Explorer search bar, prefix each cluster name with byoc--. Group the names in parentheses after index:, separated by OR. For example:

index:(byoc--cluster-1 OR byoc--cluster-2)

Replace cluster-1 and cluster-2 with your BYOC Logs cluster names.

Matching logs from the selected clusters appear in a single list. Changes to search filters and the time range apply to all selected clusters.

Use dashboards and log monitors

Enter a cross-cluster query, such as index:(byoc--cluster-1 OR byoc--cluster-2), in the log search query of a dashboard widget or log monitor.

• In dashboards, visualize logs across multiple BYOC Logs clusters, such as tracking a service’s errors across regions.
• In log monitors, alert on conditions that span multiple BYOC Logs clusters.

Use the Logs API

Send a request to the Search logs endpoint (POST /api/v2/logs/events/search). Set filter.query to a query that specifies multiple BYOC Logs clusters. For example:

{
  "filter": {
    "from": "now-15m",
    "to": "now",
    "query": "index:(byoc--cluster-1 OR byoc--cluster-2)"
  }
}

Search limitations

You cannot query BYOC Logs indexes alongside other Datadog log indexes. Additionally, Flex Logs is not supported with BYOC Logs.

Further reading

Additional helpful documentation, links, and articles:

Ingest logs to BYOC LogsDOCUMENTATION Troubleshooting BYOC LogsDOCUMENTATION Log Search SyntaxDOCUMENTATION