[UX] Log patterns in Observability (WIP)

[kavck]

https://github.com/opensearch-project/observability/issues/850 - eng RFC

Overview

Log patterns are auto generated patterns from log data that makes it quicker and easier to get actionable insights for ops teams to troubleshoot and draw meaningful insights quickly from large volumes of log data. In the first iteration, we are auto-identifying patterns based on an event’s punctuation profile we call, Punctuation Signatures.

User stories

1. As a user, I want to view auto-generated log patterns from log data so that I can detect outlier events and speed up troubleshooting.
2. As a user, I want to sort and filter log patterns so that I can review auto-generated log pattern quickly as I continue troubleshooting my analysis.
3. As a user, I want to rename log pattern names so that I can utilize meaningful nomenclature to interesting and/or non-interesting log patterns.

Flow structure

View log patterns within Event Explorer

1. Select a query or create a new one. Then navigate to the ”Pattern“ tab to view auto-generated log patterns.

Edit log pattern name within Event Explorer

1. Select a query or create a new one. Then navigate to the ”Pattern“ tab to view log patterns and select ”Edit name“ to edit log pattern name.

Design Walkthrough

View Log Patterns - Workflow

Screen by screen mockups

  

Edit Pattern Name - Workflow

Screen by screen mockups

  

Open questions

• How are you using log patterns?
• What are the most frustrating challenges you have with log patterns?
• What do you expect to see when viewing log patterns?
• What else do you want to find under log patterns?

[xinlamzn]

where are on the document for the log pattern cmd?