Query messages before and after errors

Follow

Cats Team

• May 30, 2018 21:10

 if I run the query below it returns the messages with the keywords "exception" or "error"  However, in some of our logs the actually error is on another line.  How do I modify the query to include, say, + or - 5 messages of each error or exception message it finds?

_collector="myCollector" and (exception or error) 

1

• 

  Piotr Woch

  • June 07, 2018 18:31

  Hello! Unfortunatelly, that feature is not yet available, but has been requested before by other customers, too. Would you mind visiting this site an upvote the enhancement request we have open for this?

  https://ideas.sumologic.com/ideas/SL-I-1181

  I hope your vote will help us get this function on the roadmap.

  Thank you in advance! 

  0

  Comment actions Permalink
• 

  Azriel Nguyen

  • April 03, 2019 19:50

  You can drill down into the message > Surrounding Messages > +/- 5 Minutes

  

  -1

  Comment actions Permalink

Please sign in to leave a comment.