Graylog2 / graylog2-server

Free and open log management
https://www.graylog.org
Other
7.37k stars 1.06k forks source link

Add "move time forward" and " move time backward" buttons when performing an absolute search #20717

Open drewmiranda-gl opened 6 days ago

drewmiranda-gl commented 6 days ago

What?

Add 2 buttons on the graylog search page (or wheverever search bar exists, e.g. Dashboards):

Example mockup:

image

Why?

When digging deep into logs, it is common to need to shift the time range selection of the search result. For example, viewing data in chunks 1 hour at a time. If you don't see what you are looking for you can step backwards/forwards in the interval difference of End-Start.

Grafana implements this:

image

This would be a large quality of life improvement and could help to deal with pagination issues we have currently due to max scroll size.

kmerz commented 4 days ago

I can imagine doing this for relative searches as well like 5 Minutes which will convert to absolute time range, once you hit the previous button.

Emy-01 commented 4 days ago

@kmerz @drewmiranda-gl I like the idea. We can consider this for the DW search too. @linuspahl how big would the effort be for this?

linuspahl commented 4 days ago

@Emy Do you mean the effort to reuse this feature on the DW search or the effort to implement this feature in general?

Emy commented 4 days ago

@linuspahl Hi, I think you pinged the wrong Emy. ;)

CC: @Emy-01

Emy-01 commented 4 days ago

@linuspahl I meant the feature in general

linuspahl commented 4 days ago

Thanks and sorry @Emy!

linuspahl commented 4 days ago

@Emy-01 It is not something that we can implement in half an hour, but it won't take multiple days.