- What's New
- Function Overview
- Service Overview
- Getting Started
-
User Guide
- Log Management
-
Log Ingestion
-
Ingesting Cloud Service Logs to LTS
- Ingesting AOM Logs to LTS
- Ingesting APIG Logs to LTS
- Ingesting BMS Text Logs to LTS
- Ingesting CBH Logs to LTS
- Ingesting CCE Application Logs to LTS
- Ingesting CFW Logs to LTS
- Ingesting CTS Logs to LTS
- Ingesting GaussDB(DWS) Logs to LTS
- Ingesting ECS Text Logs to LTS
- Ingesting ELB Logs to LTS
- Ingesting Enterprise Router Logs to LTS
- Ingesting FunctionGraph Logs to LTS
- Ingesting ModelArts Logs to LTS
- Ingesting SMN Logs to LTS
- Ingesting SecMaster Logs to LTS
- Ingesting ServiceStage Containerized Application Logs to LTS
- Ingesting ServiceStage Cloud Host Logs to LTS
- Ingesting VPC Logs to LTS
- Ingesting WAF Logs to LTS
- Using APIs to Ingest Logs to LTS
- Other Ingestion Modes
- Setting ICAgent Structuring Parsing Rules
-
Ingesting Cloud Service Logs to LTS
- Host Management
-
Log Search and Analysis
- Overview
- Setting Cloud Structuring Parsing
- Setting Indexes
- Searching Logs
- Viewing Real-Time Logs
- Analyzing Logs in LTS
-
SQL Analysis Syntax
- Overview
- SQL Aggregate Functions
- SQL Period-over-Period Functions
- SQL JSON Functions
- SQL IP Functions
- SQL Mathematical Functions
- SQL Time Functions
- SQL Extrema Functions
- SQL String Functions
- SQL SPLIT Functions
- SQL Comparison Operators
- SQL IP Address Functions
- SQL Reduction Functions
- Other SQL Functions
- SQL JOIN Syntax
- SQL Query Example
-
Log Visualization
- Overview
- Visualizing Logs in Statistical Charts
-
Visualizing Logs in Dashboards
- Creating a Dashboard
- Adding a Dashboard Filter
-
Dashboard Templates
- APIG Dashboard Templates
- CCE Dashboard Templates
- CDN Dashboard Templates
- CFW Dashboard Templates
- CSE Dashboard Templates
- DCS Dashboard Template
- DDS Dashboard Template
- DMS Dashboard Template
- DSL Dashboard Template
- ER Dashboard Template
- METRIC Dashboard Template
- Nginx Dashboard Templates
- VPC Dashboard Template
- WAF Dashboard Templates
- Log Alarms
- Log Transfer
- Log Processing
- Configuration Center
- API Reference
- Best Practices
-
FAQs
- Overview
- Consultation
-
Host Management
- What Do I Do If ICAgent Installation Fails in Windows and the Message "SERVICE STOP" Is Displayed?
- What Do I Do If ICAgent Upgrade Fails on the LTS Console?
- What Do I Do If I Could Not Query New Logs on LTS?
- What Do I Do If ICAgent Restarts Repeatedly After Being Installed?
- What Do I Do If ICAgent Is Displayed as Offline on the LTS Console After Installation?
- What Do I Do If I Do Not See a Host with ICAgent Installed on the LTS Console?
- How Do I Create a VPC Endpoint on the VPCEP Console?
- How Do I Obtain an AK/SK Pair?
- How Do I Install ICAgent by Creating an Agency?
-
Log Ingestion
- What Do I Do If LTS Cannot Collect Logs After I Configure Host Log Ingestion?
- Will LTS Stop Collecting Logs After the Free Quota Is Used Up If I Disable "Continue to Collect Logs When the Free Quota Is Exceeded" in AOM?
- What Do I Do If the CPU Usage Is High When ICAgent Is Collecting Logs?
- What Kinds of Logs and Files Does LTS Collect?
- How Do I Disable the Function of Collecting CCE Standard Output Logs to AOM on the LTS Console?
- How Long Does It Take to Generate Logs After Configuring Log Ingestion?
- What Do I Do If LTS Cannot Collect Logs After I Configure Log Ingestion with ICAgent?
- Log Search and Analysis
- Log Transfer
- SDK Reference
- Videos
- Message Displayed During Query: Inaccurate Query Results
- Too Many Logs Results from Log Query
- Expected Logs Not Obtained with Specific Search Statements and No Error Message Displayed
- Message Displayed During Query: Field XXX Is Not Configured with Indexing and Cannot Be Queried
- Message Displayed During Query: Full-Text Index Not Enabled and content Field and Full-Text Query Unsupported
- Message Displayed During Query: Do Not Start with an Asterisk (*) or a Question Mark (?)
- Message Displayed During Query: long and float Fields Do Not Support Fuzzy Query Using Asterisks (*) or Question Marks (?)
- Message Displayed During Query: string Fields Do Not Support Range Query Using the Operator (>=<) or IN Syntax
- Message Displayed During Query: The Search Syntax Is Incorrect and the Query Statement Needs to Be Modified
Show all
What Do I Do If I Could Not Search for Logs on LTS?
When you search for logs on the LTS console, if a message is displayed indicating that the query result is inaccurate, too many log results are matched, or field XXX without indexing configured cannot be queried, perform the following operations:
Message Displayed During Query: Inaccurate Query Results
- Possible causes: There are too many logs in the query time range, and not all logs are displayed.
- Solution: Click the query button multiple times until you obtain all logs, or shorten the query time range and query again.
Too Many Logs Results from Log Query
- Possible cause: Only searches with phrase #"value" can ensure the sequence of keywords. For example, if the query statement is abc def, logs that contain either abc or def and logs that contain the phrase abc def will be matched.
- Solution: Use phrase #"abc def" to accurately match logs containing phrase abc def.
Expected Logs Not Obtained with Specific Search Statements and No Error Message Displayed
- Possible causes: Search delimiters are not supported, or * and ? in a search statement are regarded as common characters and are not used as wildcards.
- Solution: Use the correct query statement.
Message Displayed During Query: Field XXX Is Not Configured with Indexing and Cannot Be Queried
- Possible cause: No field indexing is configured.
- Solution: Create an index for field XXX on the Index Settings tab page and run the query statement again.
Message Displayed During Query: Full-Text Index Not Enabled and content Field and Full-Text Query Unsupported
- Possible cause: Full-text indexing is disabled.
- Solution: Enable Index Whole Text on the Index Settings tab page and run the query statement again.
Message Displayed During Query: Do Not Start with an Asterisk (*) or a Question Mark (?)
- Possible cause: An asterisk (*) or question mark (?) is placed before the query statement.
- Solution: Modify the query statement or use a correct delimiter.
Message Displayed During Query: long and float Fields Do Not Support Fuzzy Query Using Asterisks (*) or Question Marks (?)
- Possible cause: An asterisk (*) or question mark (?) is used to query fields of the long and float types.
- Solution: Modify the query statement and use operators (>=<) or IN syntax for range query.
Message Displayed During Query: string Fields Do Not Support Range Query Using the Operator (>=<) or IN Syntax
- Possible cause: Operators (>=<) or the IN syntax is used to query fields of the string type.
- Solutions:
- Modify the query statement and use the asterisk (*) or question mark (?) to perform fuzzy query.
- Change the value of this field to a number.
Message Displayed During Query: The Search Syntax Is Incorrect and the Query Statement Needs to Be Modified
- Possible cause: The syntax of the operator is incorrect.
Solution: Each operator has its syntax rule. Modify the search statement based on the rule. For example, operator = requires that the value on the right must be digits.
- Possible cause: The search statement contains syntax keywords.
Solution: If the log to search contains syntax keywords, the search statement must be enclosed in double quotation marks to convert the keywords into common characters. For example, if and is a syntax keyword, change the query statement field:and to field:"and".
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.