---
title: Log Findings
description: >-
  Capture, organize, and reuse important context during log investigations in
  Log Explorer.
breadcrumbs: Docs > Log Management > Log Explorer > Log Findings
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Log Findings

## Overview{% #overview %}

Findings helps you capture, organize, and reuse important context during investigations in [Log Explorer](https://docs.datadoghq.com/logs/explorer.md).

Use findings to collect evidence, compare results, and build context as your investigation evolves. Save findings as checkpoints so you can backtrack or return to useful queries and logs. Arrange findings to visualize and remember your investigation path, and add notes to findings to record what you observed. You can also use findings as context to [Ask Bits](https://docs.datadoghq.com/bits_ai/bits_chat.md), or add them to a [Notebook](https://docs.datadoghq.com/notebooks.md) for a report to share with others.

Save log lines, visualizations, and queries as Findings with the **Add Finding** button or the **Cmd**/**Ctrl** + **S** keyboard shortcut. **Double-click** or use **Open in Explorer** to return to findings in the Log Explorer. Branch into new questions without losing track of earlier observations or investigative paths.

{% video
   url="https://docs.dd-static.net/images/logs/explorer/findings_demo-2.mp4" /%}

## Findings panel{% #findings-panel %}

Findings appears in the side panel on the left of Log Explorer. To open it:

1. Navigate to [Log Explorer](https://docs.datadoghq.com/logs/explorer.md).
1. Click the **Findings** tab on the top left.

The Findings panel is where you work with findings: arrange them, reopen them in Log Explorer, and select them to send elsewhere. The panel keeps the findings and their layout across page reloads and browser sessions until you delete them.

## Capture a finding{% #capture-a-finding %}

Add a finding from anywhere in Log Explorer by pressing **Cmd**/**Ctrl** + **S**. This captures the query, the page to return to, and the absolute time range you were viewing. To rename the default title, click Edit in the upper right corner of the finding card in the Findings panel. You can also add notes to each finding at the bottom of the finding card.

### Queries and visualizations{% #queries-and-visualizations %}

In the toolbar above your results, click the Add Finding button, or press **Cmd**/**Ctrl** + **S**. You can also click Add current page as a finding in the Findings panel.

The **Add Finding** button appears in the same place for every visualization.

The finding stores your search query, time range, and [visualization](https://docs.datadoghq.com/logs/explorer/visualize.md), including any group-by and aggregation you configured.

{% image
   source="https://docs.dd-static.net/images/logs/explorer/findings/add_finding_timeseries_viz.f7055866f851cb0d1625bed77a38eee8.png?auto=format&fit=max&w=850 1x, https://docs.dd-static.net/images/logs/explorer/findings/add_finding_timeseries_viz.f7055866f851cb0d1625bed77a38eee8.png?auto=format&fit=max&w=850&dpr=2 2x"
   alt="The Add Finding button in the results toolbar, with a tooltip showing the keyboard shortcut" /%}

### Individual log events{% #individual-log-events %}

Click a log event in your results to open the [log side panel](https://docs.datadoghq.com/logs/explorer/side_panel.md). Hover over the **Log Message** section and click the Add a finding button, or press **Cmd**/**Ctrl** + **S**. This captures the whole log event side panel to return to later.

Capturing the log event also captures the query that produced the log side panel. Returning to the finding reopens the log side panel with the corresponding query in the background.

{% image
   source="https://docs.dd-static.net/images/logs/explorer/findings/add_finding_log_message.71f76bab66b25851a457a7a2713f0ca7.png?auto=format&fit=max&w=850 1x, https://docs.dd-static.net/images/logs/explorer/findings/add_finding_log_message.71f76bab66b25851a457a7a2713f0ca7.png?auto=format&fit=max&w=850&dpr=2 2x"
   alt="The add a finding button in the Log Message section of the log side panel" /%}

### Specific text in a log message or attributes{% #specific-text-in-a-log-message-or-attributes %}

To capture part of a log message, select the text in the **Log Message** section and press **Cmd**/**Ctrl** + **S**. You can also select Add Finding from the context menu that appears with the selected text.

To capture attribute values, select the text and press **Cmd**/**Ctrl** + **S**.

In both cases, the finding stores the text you selected. You can use the finding to return to the log event side panel.

## Return to a finding{% #return-to-a-finding %}

**Double-click** a finding to return to it in Log Explorer, or hover over the finding and click Open in Explorer. Log Explorer reloads the query, time range, and visualization that the finding was captured with.

Each finding keeps the query and absolute time range. In Log Explorer, you can change your search as often as you need. Return to any earlier finding without rebuilding the query.

## Send findings to Bits AI and Notebooks{% #send-findings-to-bits-ai-and-notebooks %}

{% callout %}
# Important note for users on the following Datadog sites: app.ddog-gov.com, us2.ddog-gov.com



{% alert level="danger" %}
Bits AI is not available in the [Datadog site](https://docs.datadoghq.com/getting_started/site.md) ({% placeholder "user-datadog-site-name" /%}). You can still add findings to a Notebook.
{% /alert %}


{% /callout %}

Select one or more findings to act on them together:

- To ask [Bits Chat](https://docs.datadoghq.com/bits_ai/bits_chat.md) about them, type your question in the selection bar and click Ask Bits. You can also click Ask Bits in the menu at the bottom of the Findings panel after selecting the findings. Bits Chat opens with the selected findings attached as context.
- To add findings to a [Notebook](https://docs.datadoghq.com/notebooks.md), click Open in Notebooks. Choose a new or existing notebook.

Send only the findings that relate to your question. For example, if three of the eight findings in your panel cover the error you're asking about, select those three. Notes on findings are also sent.

## Organize your findings{% #organize-your-findings %}

Drag a finding to move or resize it. Datadog saves the layout you build, so the organization looks the same the next time you open the panel.

To reset your organization, use the auto-organize option, which groups findings by the query they came from. If you made different visualizations from the same query or saved specific log lines from that query, those findings are grouped together. Moving, resizing, or deleting a finding removes the visual grouping indication in the background.

## Delete findings{% #delete-findings %}

To delete one finding, hover over it and click the delete button in the upper right corner of the card. You can also select the finding and press the **Delete** key. To delete several at once, select them and press **Delete**. To select every finding, press **Cmd**/**Ctrl** + **A**.

The clear all button in the Findings panel deletes all findings.

To restore a finding after deleting it, click Undo in the message that appears, or press **Cmd**/**Ctrl** + **Z**.

## Keyboard shortcuts{% #keyboard-shortcuts %}

| Action                   | Shortcut                             |
| ------------------------ | ------------------------------------ |
| Add a finding            | **Cmd**/**Ctrl** + **S**             |
| Select all findings      | **Cmd**/**Ctrl** + **A**             |
| Delete selected findings | **Delete**                           |
| Undo                     | **Cmd**/**Ctrl** + **Z**             |
| Redo                     | **Cmd**/**Ctrl** + **Shift** + **Z** |
| Pan                      | **Space** + **drag**                 |
| Auto-organize (by query) | **Cmd**/**Ctrl** + **O**             |

## Further reading{% #further-reading %}

Additional helpful documentation, links, and articles:

- [Search and analyze your logs in Log Explorer](https://docs.datadoghq.com/logs/explorer.md)
- [Automatically configure your Log Explorer](https://docs.datadoghq.com/logs/explorer/saved_views.md)
- [Ask questions about your data with Bits AI chat](https://docs.datadoghq.com/bits_ai/bits_chat.md)
- [Build and share investigations with Notebooks](https://docs.datadoghq.com/notebooks.md)