Datadog displays individual logs following this general side panel layout:
Context refers to the infrastructure and application context which the log has generated. Information is gathered from tags, whether automatically attached (host name, container name, log file name, serverless function name, etc.) or added through custom tags (team in charge, environment, application version, etc.) to the log by the Datadog Agent or Log Forwarder.
Content refers to the log itself. This includes the log message, as well as all structured information extracted and enriched from the logs through Log Pipelines. For logs generated by common components of a technical stack, parsing and enriching comes out-of-the-box.
Some standard fields, for instance
duration, have specific enhanced displays in the Log Panel for better readability. Extract corresponding information from your logs and remap your attributes with standard attribute remappers.
The View in context button updates the search request in order to show you the log lines dated just before and after a selected log, even if they don’t match your filter. This context is different according to the situation, as Datadog uses the
container_id attributes, along with tags, in order find the appropriate context for your logs.
Click on the Metrics tab and access underlying infrastructure metrics in a 30 minutes timeframe around the log.
Interact with Host in the upper reserved attributes section, the related host dashboard, or network page. Interact with Container sections to jump to the container page scoped with the underlying parameters.
In case logs comes from a serverless source, the Host Section is replaced with a Serverless section that links jump to the corresponding serverless page.
Click on the APM Tab and see a log in the context of its whole trace, with upstream and downstream services running. Deep dive in APM data and the trace in APM feature.
Interact with the Service section to refocus the search in the Log Explorer and see all other logs from the same trace.
Interact with the attributes names and values in the lower JSON section to:
Use the Share button to share the log opened in side panel to other contexts.
Cmd+Ccopies the log JSON to your clipboard.
Additional helpful documentation, links, and articles: