Indexes¶
By extracting key features such as log fields and metric tags, indexes can associate feature values with raw data, enabling efficient retrieval and avoiding inefficient full scans.
After creating and managing multiple indexes, the system automatically archives log data into the corresponding indexes based on preset filter conditions. At the same time, you can customize data storage strategies for each index, effectively controlling and reducing storage costs, balancing data management flexibility with economic benefits.
Create¶
Guance supports creating or binding three types of indexes:
Create Log Index (❗️ By default, log indexes cannot be created. Please contact your account manager to apply for this feature.)
Manage Indexes¶
You can manage the index list through the following operations.
-
Disable Index: Subsequent logs will no longer enter this index but will continue to match and flow into other indexes for storage. If no other indexes are matched, they will be saved in the default
defaultindex. -
Enable Index: Subsequent logs will re-enter this index for storage.
Edit an existing log index.
Changing the storage policy will delete the data in the index. Please proceed with caution.
Click to view all operation logs for this index.
Click the icon to delete the created index.
-
After deletion, the log data in this index will also be deleted. If no other indexes are matched, subsequently reported log data will be saved in the default index
default. -
If the deleted index has been authorized for querying by other workspaces, the other workspace will no longer be able to query this index after deletion.
-
After deleting a log index, you can create an index with the same name as needed.
Click the icon to drag the created log index up or down.
Logs will flow into the first matched index. Changing the index order may alter the flow direction of logs.