diff --git a/hugo/content/en/logs/explorer/findings.md b/hugo/content/en/logs/explorer/findings.md index 676878c65ab..f76feeae082 100644 --- a/hugo/content/en/logs/explorer/findings.md +++ b/hugo/content/en/logs/explorer/findings.md @@ -2,6 +2,19 @@ title: Log Findings description: 'Capture, organize, and reuse important context during log investigations in Log Explorer.' private: true +further_reading: + - link: 'logs/explorer/' + tag: 'Documentation' + text: 'Search and analyze your logs in Log Explorer' + - link: 'logs/explorer/saved_views/' + tag: 'Documentation' + text: 'Automatically configure your Log Explorer' + - link: 'bits_ai/bits_chat/' + tag: 'Documentation' + text: 'Ask questions about your data with Bits AI chat' + - link: 'notebooks/' + tag: 'Documentation' + text: 'Build and share investigations with Notebooks' --- {{< callout url="https://www.datadoghq.com/product-preview/findings" btn_hidden="false" header="Join the Preview!" >}} @@ -12,10 +25,102 @@ Findings for Log Explorer is in Preview. Use this form to submit your request. Findings helps you capture, organize, and reuse important context during log investigations in [Log Explorer][1]. -With Findings, you can save log lines, visualizations, and queries to a canvas with the **Add Finding** button or keyboard shortcuts while investigating. This allows you to return to them or branch into new questions without losing track of earlier observations or investigative paths. +With Findings, you can save log events, visualizations, and queries to a canvas with the **Add a finding** button or a keyboard shortcut while investigating. Each finding stores the context it was captured in. You can return to it or branch into new questions without losing track of earlier observations or investigative paths. Findings persist across page reloads and browser sessions until you delete them. -Use Findings to collect possible evidence, compare results, and build context as your investigation evolves. Select findings to use as context to Ask Bits questions, or save them to a Notebook to share with others. +Use Findings to collect possible evidence, compare results, and build context as your investigation evolves. Select findings to use as context for [Bits AI][2] questions, or send them to a [Notebook][3] to share with others. {{< img src="logs/explorer/findings_demo.mp4" alt="Findings demo in Log Explorer" video=true style="width:100%;" >}} +## Findings panel + +Findings lives in the side panel on the left of Log Explorer, next to your saved views. To open it: + +1. Navigate to [Log Explorer][1]. +2. Click {{< ui >}}Views{{< /ui >}} in the upper left corner to open the side panel. +3. Click the **Findings** tab. The tab shows how many findings you have. + +The panel contains the canvas, the workspace where each finding appears as a card. The canvas is where you work with findings: arrange them, reopen them in Log Explorer, and select them to send elsewhere. It keeps its contents and layout across page reloads and browser sessions. + +To dock the panel next to your log results, click {{< ui >}}Pin{{< /ui >}}. To collapse it, click {{< ui >}}Hide{{< /ui >}}. + +Findings includes a walkthrough of the canvas that you can reopen at any time. + + + +## Capture a finding + +Add a finding from anywhere in Log Explorer that shows results. Datadog names each finding after what you captured, and records the query and time range it came from. + +### Queries and visualizations + +In the toolbar above your results, click the {{< ui >}}Add a finding{{< /ui >}} icon, or press Cmd/Ctrl + S. You can also click {{< ui >}}Add current page as finding{{< /ui >}} in the Findings panel. + +The finding stores your search query, time range, and [visualization][4], including any group-by and aggregation you configured. Capture the same query as a list and as a timeseries to keep both views side by side. + +### Individual log events + +Click a log event in your results to open the [log side panel][5]. Hover over the **Log Message** section and click the {{< ui >}}Add a finding{{< /ui >}} icon, or press Cmd/Ctrl + S. + +### Specific text in a log message + +To capture part of a log message, such as an error string or an identifier, select the text in the **Log Message** section and press Cmd/Ctrl + S. The finding stores the text you selected instead of the whole event. + + + +## Organize the canvas + +Hover over a finding to rename it, and drag it to move or resize it. Datadog saves the layout you build, so the canvas looks the same the next time you open the panel. + +To group findings by the query they came from, click the auto-organize icon on the left of the canvas. Moving, resizing, or deleting a finding resets the grouping. + + +The controls on the left of the canvas also zoom in and out, fit the canvas to your findings, and open a full-screen view. The full-screen view gives you the same controls with more room, and you can drag the background to pan across it. + +## Delete findings + +To delete one finding, hover over it and use the delete control on the card. To delete several at once, select them and press Delete. To select every finding first, press Cmd/Ctrl + A. + + +The clear icon in the Findings panel deletes findings; it does not clear your selection. It removes the findings you have selected, or every finding when nothing is selected. + + +Deleting is not permanent. A toast appears with an {{< ui >}}Undo{{< /ui >}} option, and Cmd/Ctrl + Z restores what you removed. Undo covers your last ten actions on the canvas. + + + +## Return to a finding + +Double-click a finding, or hover over it and click the {{< ui >}}Open in Explorer{{< /ui >}} icon. Log Explorer reloads the query, time range, and visualization that the finding was captured with. The rest of your findings stay on the canvas. + +Each finding keeps its own query and time range. You can change your search as often as you need, then come back to an earlier result in one click with no query to rebuild. + +## Use findings as context + +Select one or more findings on the canvas to act on them together: + +- To ask [Bits AI][2] about them, type your question in the selection bar and click {{< ui >}}Ask Bits{{< /ui >}}. Bits AI chat opens with the selected findings attached as context. +- To copy them into a [Notebook][3], click {{< ui >}}Open in Notebooks{{< /ui >}} and choose a new or existing notebook. The findings you send stay on the canvas. + +Send only the findings that relate to your question. If three of the eight findings on your canvas cover the error you're asking about, select those three. + +## Keyboard shortcuts + +| Action | Shortcut | +| ------ | -------- | +| Add a finding | Cmd/Ctrl + S | +| Select all findings | Cmd/Ctrl + A | +| Delete selected findings | Delete | +| Undo | Cmd/Ctrl + Z | +| Redo | Cmd/Ctrl + Shift + Z | + + + +## Further Reading + +{{< partial name="whats-next/whats-next.html" >}} + [1]: /logs/explorer/ +[2]: /bits_ai/bits_chat/ +[3]: /notebooks/ +[4]: /logs/explorer/visualize/ +[5]: /logs/explorer/side_panel/