Skip to main content

Search Your Log Data

The search page serves as the central hub of Graylog, where you can execute searches (queries) and visualize the results using a wide range of widgets. Any search can be saved or exported as a dashboard, allowing for easy reuse of specific search configurations. Dashboards offer the flexibility of widget-specific search queries and can be shared with others to enhance their work-flows. To further enhance the workflow, parameters can also be incorporated into the search query.

You may view the total amount of search results returned for any search query on the information icon (i) found in the top left corner of the Search page. This information is also available for Dashboards

Select Search Undo/Redo

You may go one step back or forward in search or dashboard views using the search undo/redo feature. The undo/redo button can be found in the left sidebar of your search page.

Note

Please note that although saved changes can be undone or redone, saved actions cannot be reverted. Undoing or redoing causes a change of view only.

If you decide to resize a widget or rearrange a dashboard but are not happy with the outcome, you can revert to the previous state with the undo/redo button. You can experiment with various views without affecting the current dashboard.

undo button.png

Use Keyboard Shortcuts for Search

Graylog provides the following shortcuts to navigate the search page without using your mouse.

Action

Shortcut

Show available keyboard shortcuts

?

Undo last action

Ctrl + shift + z

Redo last action

Ctrl + shift +y

Save search

Ctrl + s

Save search as

Ctrl + shift +s

Show scratchpad

Ctrl + /

Note

Holding shift + ? in the Graylog UI brings up a dialogue box that lists available shortcuts for that page. The dialog box will only contain available shortcuts for the page you are on.