Overview
With Live Tail, access all your log events in near real time from anywhere in your infrastructure. The Live Tail view provides visibility on both indexed and non-indexed logs streaming to Datadog - see also Exclusion Filters on logs indexes. Logs flowing through the Live Tail are all structured, processed, and enriched from Log Pipelines.
For example, Live Tail is specifically useful to check if a process has correctly started or if a new deployment went smoothly.
Live Tail view
In the Log Explorer, choose the Live Tail option in the timerange to query logs as they flow into Datadog.
Contrary to queries on indexed logs happening in the Log Explorer, queries in the Live Tail do not require that you declare a facet beforehand.
Note: For the sake of readability, the Live Tail output is sampled when too many logs matching the query are flowing in. The sampling applied is uniformly random, so that your Live Tail logs are statistically representative of your actual log throughput. Scope your query down with additional search filters if you need visibility on every single log flowing in.
Further Reading
Additional helpful documentation, links, and articles:
