Loving the new Logs UI functionality. Makes checking the logs of distributed systems much quicker and more pleasant to use.
While it works well, there's one pet peeve I have - when a document does not have the "message" field, it will show the line as "failed to find message" in the Logs UI.
This is a problem because I have indexes sorted by topics, for an example Slurm information is in the "slurm-*" indexes. There's three different kinds of information:
- Slurm jobs information
- Slurm nodes information
- Slurm logs from all the nodes
Now the first two do not need a message field, all the data is in different fields that are used to visualize and search on. And there's thousands of such documents in between some log lines.
Having log lines separated by thousands of lines of "failed to find message" is not very useful. I wish I could either turn that line off, or somehow hide it and save the setting permanently.
I can currently circumvent this by using a search bar query, but every time you go to the page you need to rewrite the query. Possibility to save and default the search would help as well.
Hope my two cents are helpful.