Logs

Monitoring → Logs brings host log files, Docker output, PM2 logs, and the system journal into one viewer. The left rail chooses a source; the line above the viewer shows its kind, state, path, size, and rotated files, with Export at its end. The viewer offers Live, History, and Insights for that source. Discovery respects JD_LOG_ROOTS (default /var/log), so a custom PM2 log directory outside those roots needs an administrator to allow it.

The same viewer is embedded on the page that owns the service: databases, Docker containers and stacks, deployments, systemd units, PM2 applications, scheduled jobs, proxy sites and the proxy engine, certificates, Security, Network, and Packages. Each reader recognises the events its own source produces, such as HTTP requests, authentication attempts, firewall decisions, service exits, and application exceptions, as named events with filterable fields, and quick views narrow a log to slow statements, failed logins, or upstream errors.

Follow an incidentCopy Anchor Link

1. Choose the relevant source in the rail. Open Live for incoming lines, History for an earlier period, or Insights for what a window adds up to.
2. Use the one filter row: the search field with its regular-expression and match-case switches, the time window, and the level chips. Unknown is a real level for lines with no recognized severity word; keep it selected if a stack trace continuation might matter. The filter runs on the server and stays the same when you switch between Live and History.
3. In Live, the filter applies as you type and the stream reconnects with matching opening lines; press Enter to search the history instead. Pause holds incoming lines and adds them when you resume; it does not throw them away. In History, press Enter or Search to run the words you typed, so every keystroke does not start a full scan.
4. Open Options to hide lines containing a phrase, show lines around each match, choose how the source is read, include rotated files, or limit the journal to this boot. Anything set there stays visible as a chip in the filter row. The histogram over History's lines can narrow the window to a busy period, and picking a preset or a span on the live stream opens History over it. Use Export when you need a copy of the selected source, window, and filters.

The viewer reads gzip and bzip2 rotated archives transparently. xz and zstd archives are skipped rather than offered as searchable. The retention note tells you whether a file has a matching logrotate rule and when rotation last ran. If a source is missing, check discovery and root access rather than assuming it produced no logs.

Links from other pages can open Logs with a source and exact since/until timestamps. Times must include a timezone; the controls show them in your browser's local time while keeping the original instant for searches and reloads. For resource trends around the same incident, compare Metrics and Processes.