quickwit-oss / quickwit-oss/quickwit-datasource

Improve logs panel compatibility with configured log level field

Open
#158 1 comment 3 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
76
Forks
44
PR merge metrics
No merged PRs in 30d

Description

The Grafana logs panel determines the log level from a level field, or falls back to looking for keywords in the message.
When using a different field name for the log level, all entries appear grey.

The Elasticsearch datasource works around this by renaming the logLevelField to level, which was removed here in f4a752e.
I understand why it was removed, it doesn't really seem like the best way of handling this. Especially when there could be another field named level that gets obscured because of this.

To make the logs panel work with the logLevelField option, would you consider making this behaviour opt-in?

Alternatively, it could probably also be done client-side. There should already be something handling this for the log volume panel in the explore tab, I'm not sure if the logs panel can be customized in the same way.

I'd be happy to create a PR for this, just let me know which option you'd prefer.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing the Grafana logs panel handling for the configured logLevelField and review commit f4a752e, including the Elasticsearch datasource workaround. Compare it with the existing log volume panel customization mentioned in Explore. Done means entries use a non-level field for log severity without obscuring another level field, with the chosen behavior covered by appropriate tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
observability
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.