[Metrics UI] Enhanced host details - Logs

[sorantis]

Add Logs tab to Enhanced Host Details

Details

• Use the LogStream component to show logs from the host.
• the Open in Logs link opens the Logs app with prefilled filter : host.name

[elasticmachine]

Pinging @elastic/logs-metrics-ui (Team:logs-metrics-ui)

[sgrodzicki]

@afgomez your help from the Logs UI perspective would be very much appreciated.

[afgomez]

👋! For the log stream component itself, you can find the docs in https://github.com/elastic/kibana/blob/master/x-pack/plugins/infra/public/components/log_stream/README.md

The component doesn't include a searchbox, so you will have to implement it yourselves. The easiest way would be to pass the KQL expression on the searchbox to the component through its query prop.

For the "Open in logs" button, the infra plugin has a useLinkProps hook that can be used for that.

Let me know if you have any specific questions about the component!

[phillipb]

@sorantis is the "Search for log entries" textbox supposed to redirect you to logs UI? From what I can tell, there is no search ability in the LogStream component. Is that right @afgomez?

If it is only meant to be a redirect, I think we should remove it. The "Open in Logs" button already achieves that functionality

[weltenwort]

As @afgomez wrote, you can pass arbitrary queries to the component:

The component doesn't include a searchbox, so you will have to implement it yourselves. The easiest way would be to pass the KQL expression on the searchbox to the component through its query prop.

[sorantis]

The search box is supposed to be used to filter logs in LogStream.

[phillipb]

Thanks, @weltenwort I missed that. @sorantis what should the timeframe be for the logs? The LogStream component requires you to specify a fixed start and end time for the stream.

[sorantis]

I think the time range should be aligned with the time ranged used across all Kibana apps.

A couple of questions regarding the component:

• Can LogStream automatically preload entries while scrolling?
• Does LogStream support Live tail?

[afgomez]

👋 @sorantis

• Can LogStream automatically preload entries while scrolling?

Yes. It was merged last week on master

• Does LogStream support Live tail?

No. We also don't plan to implement it in the short term. If this is important and the containing page has a SuperDatePicker with auto-refresh it can be tied to it. (once #83302 is merged)