docs(investigate): add Explore logs (Logs Drilldown) page - #385
Merged
Conversation
Add a dedicated Explore logs page documenting the onboarding canvas that lets users browse a cluster's indexes and datasets — with a live severity histogram and raw log-line preview per card — and turn raw indexes into a queryable dataset before writing any PPL. Also cross-link to it from Discover Logs for users who don't yet have a dataset. Screenshots captured from a local OpenSearch Dashboards build with the feature enabled. Relates to opensearch-project/OpenSearch-Dashboards#12395 Relates to opensearch-project/OpenSearch-Dashboards#12407 Signed-off-by: Shenoy Pratik Gurudatt <sgguruda@amazon.com>
ps48
requested review from
anirudha,
goyamegh,
joshuali925,
kylehounslow and
vamsimanohar
as code owners
August 3, 2026 22:02
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #385 +/- ##
=======================================
Coverage 55.62% 55.62%
=======================================
Files 4 4
Lines 169 169
Branches 48 47 -1
=======================================
Hits 94 94
Misses 74 74
Partials 1 1 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
- Correct the entry-point description: Explore logs is reachable from the Logs navigation popover, the Logs query bar, and the Logs empty state (it is not limited to the query bar). - Move Explore logs before Discover Logs in the sidebar (order 20, between Datasets and Discover Logs). - Replace em dashes with house-style punctuation to match sibling pages. Signed-off-by: Shenoy Pratik Gurudatt <sgguruda@amazon.com>
Remove the PPL preview note and the local-cluster aside from the Prerequisites section. Signed-off-by: Shenoy Pratik Gurudatt <sgguruda@amazon.com>
joshuali925
reviewed
Aug 3, 2026
joshuali925
approved these changes
Aug 3, 2026
Explore and the Logs Drilldown are enabled by default in the observability stack, so the config-flag prerequisite no longer applies. Signed-off-by: Shenoy Pratik Gurudatt <sgguruda@amazon.com>
Co-authored-by: Joshua Li <joshuali925@gmail.com> Signed-off-by: Shenoy Pratik <sgguruda@amazon.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Adds a dedicated Explore logs documentation page under Investigate → Discover and cross-links to it from Discover Logs.
Explore logs (also called the Logs Drilldown) is an onboarding canvas for the Logs experience. It lets a user browse the log data a cluster holds — with a live severity histogram and a preview of the latest raw log lines for each index and dataset — before writing a query, and turn one or more raw indexes into a queryable dataset in a few clicks. This addresses the Logs cold-start problem: "what logs do I have, are they flowing right now, and how do I start?"
The new page covers:
explore.enabledandexplore.logsDrilldown.enabledflags (both off by default), an observability workspace, a registered data source under Multiple Data Sources, and the PPL dependency for previews.The Discover Logs page gets a short
:::tip+ canvas image pointing users who don't yet have a dataset to Explore logs.Screenshots were captured from a local OpenSearch Dashboards build with the feature enabled and live data. The Starlight link validator passes (
npm run build).Issues Resolved
Relates to opensearch-project/OpenSearch-Dashboards#12395 (RFC)
Relates to opensearch-project/OpenSearch-Dashboards#12407 (implementation)
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.