Octri

Monitoring

Logs

Logs is every event your SDKs reported, newest first. It's the raw material behind every other tab, and where you land when something just broke.

Narrowing it down

The unfiltered stream is noise. Use the filter builder or type a query:

sql
level = 'error' AND statusCode >= 500 ORDER BY timestamp DESC

See Search and filters for the fields and operators.

Reading an event

Opening an event shows what the SDK captured:

Leveldebug, info, warning, error, fatal
StatusThe HTTP status returned
LatencyHow long the call took
OperationWhich endpoint, by its method name
EnvironmentWhich project the event belongs to
FingerprintWhat groups this event into an issue
Stack traceWhere it failed, resolved to your source if symbols are uploaded
ContextStructured data attached by the SDK
Raw eventEverything, exactly as received
Fingerprint is the bridge to Issues

Two events with the same fingerprint are the same problem. When a log line looks familiar, its fingerprint tells you whether it really is the issue you already triaged.

Live updates

New events stream in as they arrive. During an incident you can watch it happen rather than refreshing.

Logs, or Issues?

Both show errors, and reaching for the wrong one wastes time.

UseWhen
LogsYou want individual events. "What exactly did that request do?"
IssuesYou want problems. "What's broken, and for how many people?"

Ten thousand log lines are one issue. Start at Issues to know what's wrong, come to Logs to see a real example of it.

What's kept

Raw events are kept for 30 days. Charts over longer ranges keep working (they read hourly rollups), but you can't open an individual event older than the raw window.

Sensitive data

Common sensitive keys (passwords, tokens, secrets) are stripped from events automatically before they're stored.

Redaction catches conventions, not intent

The automatic list knows password and token. It cannot know context.customerReference holds something sensitive, and an error message that interpolates a key is just a string to it.

Don't send what shouldn't be stored. Redaction is the safety net, not the plan.