[Feature Request] Dashboard-plugin to view logs

[SebastianThorn]

Is your feature request related to a problem? Please describe. OpenSearch does not have a simple way to view logs, it's often a hassle to check logs.

• Columns don't get saved Every time a developer would like to search for logs the columns will reset for even horizontal distribution. The column needed are often the same over a variety of applications

• The search patterns don't have an easy "drop-down" or search-function A built-in search or select would make this easier.

• Much space is wasted on not showing logs The fields on the left should have a "drawer" or an easy way to hide. Use the entire width of browser for logs. Same goes for the graph, it should have a "hide" button.

I made an image to visualize some of what i'm trying to describe.

Describe the solution you'd like More like what Graylog has, it's simple and clear. Log View Widget

Describe alternatives you've considered Modifying the current plugin. Creating a new plugin for this usecase.

Additional context I made a post on the forums some time ago, I did not get any response so I thought I try here. https://forum.opensearch.org/t/view-logs-like-in-graylog/16877

This issue might also be somewhat releated: https://github.com/opensearch-project/OpenSearch-Dashboards/issues/5524

[ashwin-pc]

@SebastianThorn Can you explain what you mean by

The search patterns don't have an easy "drop-down" or search-function A built-in search or select would make this easier.

[SebastianThorn]

@ashwin-pc We have fixed tags for a number of fields, example environment, Even tho they are fixed and the only known possibilities are dev, tst, and prd we have to type them. A drop-down with pre-populated values dev, tst, and prd when selecting environment would be nice.

[ashwin-pc]

@SebastianThorn still a little confused here. Sorry if i sound like im repeating myself. There are two search inputs on the discover page. Which one are you referring to. Also is there an example video or screenshot of such an interface?

[SebastianThorn]

@ashwin-pc I'm sorry for the confusion, this part of Dashboards i'm referring to regarding the drop-down.

Would be easier if I could select the environment, instead of typing it.

This might explain better what i'm looking for: https://nileshpatel17.github.io/ng-multiselect-dropdown/

[ashwin-pc]

Ah i see what you mean. This is already possible. However you have to index the field as a keyword and not a text field. See the example here: https://playground.opensearch.org/app/data-explorer/discover#?_a=(discover:(columns:!(_source),isDirty:!f,sort:!()),metadata:(indexPattern:ff959d40-b880-11e8-a6d9-e546fe2bba5f,view:discover))&_g=(filters:!(),refreshInterval:(pause:!t,value:0),time:(from:now-15m,to:now))&_q=(filters:!(),query:(language:kuery,query:''))

The category field has two mappings, one as a keyword and one as a text field. Selecting the keyword makes it possible to have a dropdown that has prepolulated options

[SebastianThorn]

Ah i see what you mean. This is already possible. @ashwin-pc Great, thanks!