Log queries

You can use multiple queries in the Kloudfuse Logs interfaces.

When you specify the first filter, you define the first query. Kloudfuse identifies it as query (a) in the interface. You can add additional queries, (b) and others, to your analysis.

Add query

To add a query, click (Add Query).
Notice that a new query (B) appears under query (A), and it is a duplicate.

This is intentional, and makes it is easier to perform calculations across the time series retrieved by the two queries.
Change the selected filter in query (B).

Here, change Kubernetes:pod_name="pinot-server-realtime-0" to Kubernetes:pod_name="kfuse-profiler-server-0".
The interface displays the result of two queries, for the pinot server and for the Kloudfuse profiler.

Separate Query Charts

When you combine 2 or more queries on the same chart, it is relatively easy to see their relationship. See the example of the chart that shows both pinot server and Kloudfuse profiler server.

However, because the two metrics often have significantly different value ranges on the Y axis, it may be difficult to see the detail. By separating the queries into their individual charts, you vertically "expand" the axis, making it easier to visualize patterns and trends.

To separate a graph into its constituent queries, click the Combine all queries into one chart option to deselect it. The interface displays the two charts side-by-side.

+ Notice that the peaks and lows of both charts are much more pronounced in this rendering.

+ image::log-analytics-query-two-separate.svg[]

Combine query charts

To combine separate charts, click to select the Combine all queries into one chart option.

Refresh the query

Whenever you load a query, it fetches the results from the specified time interval. If that time interval is relative to now(), as the default of Last 5 minutes, time passes. To refresh the charts, perform a new data fetch.

To refresh the graphs with the same options, follow these steps:

Click the Refresh icon, , at the top right of the interface.
Kloudfuse refreshes the view.
Kloudfuse refreshes the view.

Here, the old time interval was from 23:08 to 23:13, while the new interval is for a few minutes later, from 23:33 through 23:38.

Remove a query

You can remove a query from the interface when working with multiple queries. You cannot remove the only (last) query on the page; instead, select a different query in the first drop-down.

When you specify an object in the search bar, Kloudfuse adds it as a tile. You can add multiple tiles to your query.