APM Log Correlation not showing up...from which index/data stream does that app look for correlations?

Elastic Observability APM
1

I am sending log entries to elasticsearch directly, bypassing filebeat. The index/datastream is ".ds-logs-radicale-2022.11.07-2022.11.07-000001" (the duplicated date shouldn't be a problem ?). I can see the log entry in Kibana Logs panel under stream. It has the correct trace, transaction, and span ids:

image
image741×394 28.4 KB

However, when I look into APM > Logs, nothing shows up.
I am using elasticsearch 8.4.2, apm server 8.4.2.

Is APM log correlation only looking for specific log data streams, i.e. loaded from filebeats, etc. ?

2

I updated the index/data stream name to the canonical format:
.ds-logs-radicale-default-2022.11.07-000001

But it still doesn't show the log entry at the "transaction level:

image
image759×604 22.2 KB

However, the top level Logs show the logs:

image
image1135×266 22.2 KB

Any help ? Thanks

3

This topic was automatically closed 20 days after the last reply. New replies are no longer allowed.