Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Kloudfuse has a large number of functions for examining the logs.

Algorithms

Anomalies

Overlay a band on the metric, showing the expected behavior of a series based on past values.

Outliers

Highlight outliers series.

Forecast

Forecast future values based on past values.

Arithmetic

Absolute value

Absolute value of the metric.

Ceil

Rounds up the sample values of all elements in the time series to the nearest integer.

Cube root

Calculates the cube root of a numeric element; \$root(3)(value)\$.

Exponential

Calculates the exponential function for all elements of the time series.

Expm1

Calculates the \$e(x)-1\$ function for all elements of the time series; compensates for the roundoff error in Exponential.

Floor

Rounds down the sample values of all elements in the time series to the nearest integer.

Log

Calculates the natural logarithm of all values in a time series; loge.

Round

Rounds the sample values of all elements in the time series to the nearest integer.

Square root

Calculates the square root of all values in the time series, \$sqrt(value)\$.

Trigonometric

Acos

Calculates the arccosine of all elements in the time series.

Asin

Calculates the arcsine of all elements in the time series.

Atan

Calculates the arctangent of all elements in the time series.

Cos

Calculates the cosine of all elements in the time series.

Cosh

Calculates the hyperbolic cosine of all elements in the time series.

Sin

Calculates the sine of all elements in the time series.

Sinh

Calculates the hyperbolic sine of all elements in the time series.

Tan

Calculates the tangent of all elements in the time series.

Tanh

Calculates the hyperbolic tangent of all elements in the time series.FuseQL is a new query language to perform analytics on log events. It is meant to be a drop-in replacement for Grafana’s LogQL support in Kloudfuse. In addition, it also supports more advanced operators such as anomaly detection, outlier detection, forecasting and several arithmetic and trigonometric operators.

Info

Users can switch between FuseQL and LogQL with a toggle button on the log analytics page.

For some of the common use cases on how to use log analytics with FuseQL, refer to the cheatsheet page.

Query Builder

...

Log Filters

To filter out logs that you want to run your analytics query on, click image-20241107-194249.pngImage Added (Search logs). If no filters are specified, FuseQL will consider all log lines.

...

Aggregations

Once the log filters have been added, you can apply an aggregation operator on the log lines. By default, FuseQL will display the count of all log lines that match the filter conditions.

For more information on various supported aggregation operators, refer to Aggregation Operators.

Groups

FuseQL also supports grouping of log lines by label and facets. Click on the by dropdown to add group by fields to your aggregation operators. By default, FuseQL groups by time buckets, and by collapsing all other labels.

...

Limit To

By default, FuseQL limits the resulting time series values to the top 10. This can be changed by editing the dropdown.

...

Roll Up

FuseQL aggregates data by roll up time period (for example, five seconds). The roll up value is auto-selected by the user-selected time range, but can be edited if needed. Editing the roll up will change the number of bucketed results you see in the visualization.

Below is an example of using a 1m roll up in a time range of 5m resulting in 5 buckets.

...

Functions

FuseQL supports various functions - you can choose any of the available functions by clicking on button. The list of functions supported can be broadly classified into the following three categories:

Add Query

To add another query, click image-20241107-220237.pngImage Added (Add Query). Notice that a new query image-20241107-220454.pngImage Added (B) appears under query image-20241107-220509.pngImage Added (A), and it is a duplicate.

...

Add Formula

FuseQL also supports formulas by applying various mathematical operators on a set of queries. Currently following mathematical operators are supported:

  • Addition (+)

  • Subtraction/Difference (-)

  • Multiplication/Product (*)

  • Division (/)

  • Modulo (%)

  • Pow (^)

Each query can have its own set of filters and aggregation operators.

The screenshot below shows an example of counting all log lines with levels info, warn and error.

...

Note

Formulas are currently not supported with any advanced functions or math operators. You can only use log filters and aggregation operators with formulas.

Visualizations

FuseQL supports four different visualization types. The default visualization is Time Series.

...

Time Series

Use Time Series Visualization when you want to analyze trends, patterns, and behaviors in buckets spanning the selected time range.

...

Top List

Use Top List when you want to quickly identify and compare the highest-ranking groups within the selected time range.

...

Table

Use Table when you need a detailed, row-by-row summary of your data for deeper comparison and analysis within the selected time range.

...

Pie Chart

Use Pie Chart when you want to visualize the relative proportions of different groups within your data in the selected time range.

...