--- title: Log Visualizations description: >- Visualize the outcome of filters and aggregations to put your logs into the right perspective and bubble up decisive information. breadcrumbs: Docs > Log Management > Log Explorer > Log Visualizations --- # Log Visualizations ## Overview{% #overview %} Visualizations define how the outcome of filter and aggregates are displayed. Using the logs query editor, select the relevant visualizations to surface crucial information. ## Lists{% #lists %} Lists are **paginated** results of logs or aggregates. They are valuable when individual results matter, but you have no prior or clear knowledge on what defines a matching result. Lists allow you examine a group of results. Lists displaying individual logs and lists displaying aggregates of logs have slightly different capabilities. ### List of logs{% #list-of-logs %} For a list of individual logs, choose which information of interest to display as columns. **Manage the columns** of the table using either: - The **table**, with interactions available in the first row. This is the preferred method to **sort**, **rearrange**, or **remove** columns. - The **facet panel** on the left, or the *log side panel* on the right. This is the preferred option to **add** a column for a field. With the **Options** button, control the **number of lines** displayed in the table per log. {% video url="https://datadog-docs.imgix.net/images/logs/explorer/table_controls.mp4" /%} The default **sort** for logs in the list visualization is by timestamp, with the most recent logs on top. This is the fastest and therefore recommended sorting method for general purposes. Surface logs with lowest or highest value for a measure first, or sort your logs lexicographically for the unique value of facet, ordering a column according to that facet. **Note**: Although any attributes or tags can be added as a column, sorting your table is most reliable if you [declare a facet](https://docs.datadoghq.com/logs/explorer/facets/) beforehand. Non-faceted attributes can be added as columns, but it does not produce reliable sorting. The configuration of the log table is stored alongside other elements of your troubleshooting context in [Saved Views](https://docs.datadoghq.com/logs/explorer/saved_views/). ### List aggregates of logs{% #list-aggregates-of-logs %} The columns displayed in list of aggregates are columns **derived from the aggregation**. Results are sorted according to: - Number of matching events per aggregate for **pattern** aggregation (default to descending: more to less) - Lexicographic order of the transaction id for **transaction** aggregation (default to ascending: A to Z) ## Timeseries{% #timeseries %} Visualize the evolution of a single [measure](https://docs.datadoghq.com/logs/search-syntax) (or a [facet](https://docs.datadoghq.com/logs/search-syntax) unique count of values) over a selected time frame, and (optionally) split by up to three available [facets](https://docs.datadoghq.com/logs/search-syntax). The following Timeseries log analytics shows the evolution of the **top 50 URL Paths** according to the 95th percentile of **duration** over the last 15 minutes. {% image source="https://datadog-docs.imgix.net/images/logs/explorer/timeseries.8e8966572236d672049fe8d35d361923.png?auto=format" alt="Timeseries example" /%} Choose additional display options for timeseries: the **roll-up interval**, whether you **display** results as **bars** (recommended for counts and unique counts), **lines** (recommended for statistical aggregations) or **areas**, and the **colorset**. ## Top list{% #top-list %} Visualize the top values from a [facet](https://docs.datadoghq.com/logs/search-syntax) according to the chosen [measure](https://docs.datadoghq.com/logs/search-syntax). For example, the following top list shows the **top 15 Customers** on a merchant website according to the number of **unique sessions** they had over the last day. {% image source="https://datadog-docs.imgix.net/images/logs/explorer/toplists.f0581d1a034e1aff56d365cc5287aca2.jpg?auto=format" alt="Top list example" /%} ## Nested tables{% #nested-tables %} Visualize the top values from up to three [facets](https://docs.datadoghq.com/logs/search-syntax) according to a chosen [measure](https://docs.datadoghq.com/logs/search-syntax) (the first measure you choose in the list), and display the value of additional measures for elements appearing in this table. Update a search query or examine the logs corresponding to either dimension. - When there are multiple measures, the top or bottom list is determined according to the first measure. - The subtotal may differ from the actual sum of values in a group, since only a subset (top or bottom) is displayed. Events with a null or empty value for this dimension are not displayed as a sub-group. **Note**: A table visualization used for one single measure and one single dimension is the same as a Toplist, just with a different display. The following table log analytics show the evolution of the **Top 10 Availability zones**, and for each Availability Zone the **Top 10 Versions** according to their **number or error logs**, along with the number of unique count of **Hosts** and **Container ID** for each. {% image source="https://datadog-docs.imgix.net/images/logs/explorer/nested_tables.2aaa5dcf63f06dccb308221b49f89c21.jpg?auto=format" alt="Table example" /%} ## Pie chart{% #pie-chart %} A pie chart helps you organize and show data as a percentage of a whole. It is useful when comparing the relationship between different dimensions such as services, users, hosts, countries, etc. within your log data. The following pie chart shows the percentage breakdown by **service**. {% image source="https://datadog-docs.imgix.net/images/logs/explorer/doc_pie_chart.541a596887a7eea89b0fbd7c60e03052.png?auto=format" alt="Pie chart example showing percentage breakdown by service" /%} ## Tree map{% #tree-map %} A tree map helps you organize and show data as a percentage of a whole in a visually appealing format. Tree maps display data in nested rectangles. Compare different dimensions using both size and colors of the rectangles. You can also select multiple attributes to view a hierarchy of rectangles. The following tree map shows the percentage breakdown by **service**. {% image source="https://datadog-docs.imgix.net/images/logs/explorer/doc_tree_map.c6a25973ace5dc90288be11a6ac20974.png?auto=format" alt="Tree map example showing percentage breakdown by service" /%} - [Learn how to filter logs](https://docs.datadoghq.com/logs/explorer/search) - [Learn how to group logs](https://docs.datadoghq.com/logs/explorer/analytics) - [Export views from the Log Explorer](https://docs.datadoghq.com/logs/explorer/export)