0

I recently joined a company that uses Datadog for observability, and I'm having trouble building a specific log query for a dashboard in the web GUI.

I need to create a filter that does a full-text search for any logs containing the string *schedule*, but only if it is not a substring of *scheduledtask*. Here are a few examples. I have highlighted the parts of the query that should match

Logs that should match:

"Error building scheduleStep as part of scheduledtask_A"

"Error building scheduleScore"

Logs that should not match:

"Error with scheduledtask_A"

So far, I've tried these queries:

   *:*schedule* AND -*:*scheduledtask*

This works for the second case but excludes the first log (i.e., it doesn't match "Error building scheduleStep as part of scheduledtask_A").

*:*schedule*

This matches the logs that contain schedule (including the logs I want to exclude), but I can't figure out how to exclude logs containing just scheduledtask.

I know Datadog doesn't allow regular expressions in log queries, so I'm a bit stuck. Does anyone have suggestions on how to build this query?

Any help or insights would be greatly appreciated. Thank you in advance!

Improve this question
Related questions
3
datadog log processing: how to unescape nested json
0
Creating a log monitor based on multiple lines
5
How to query Datadog to return the values of an attribute instead of the overall count of events
Load 4 more related questions Show fewer related questions

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.