Explore And OQL

Goal

Use Explore to answer ad hoc questions with OQL, Oriel’s pipeline query language.

Workflow

1. Select a workspace, project, environment, service, and time range.
2. Open Explore.
3. Start with one of the four sources: spans, traces, logs, or metrics.
4. Add pipeline stages such as where, stats, fields, sort, top, and limit.
5. Save useful queries or pin panels to dashboards.

Examples:

spans | where duration > 250ms | stats p95(duration), count() by http.route

logs | where severity >= warn and body contains "timeout" | limit 200

metrics | where name == "http.server.duration" | stats p95(value) by service, bin(5m)

Permissions

Explore requires telemetry:query. Saving queries requires queries:manage. Pinning results to a dashboard requires dashboards:manage.

Related Pivots

• Open a trace result in Trace Detail.
• Open logs near a selected trace or span.
• Use a service value as the active service scope.
• Move a query into a dashboard panel when it should be monitored repeatedly.

See the OQL reference for the closed syntax and field sets.