[APM Service Logs] Want log line details similar to the flyout on the Observability Logs Stream screen or on Kibana Discover

[cyrille-leclerc]

Describe the feature:

On the APM Service Logs view, want log line details similar to the details available as flyouts in Kibana Discover and in the Observability Logs App.

When considering the log line details of the Observability Logs Stream screen, I also want the improvements discussed on:

• Logs flyout enhancements for use on APM service logs view #125869

Describe a specific use case for the feature:

When observing my service using Elastic Observability APM, I want to explore the logs of this service, slice & dice the data...
Improving the visualization of the details of log lines is one of the improvements to achieve this goal.

[elasticmachine]

Pinging @elastic/apm-ui (Team:apm)

[elasticmachine]

Pinging @elastic/infra-monitoring-ui (Team:Infra Monitoring UI)

[formgeist]

@cyrille-leclerc Isn't this a duplicate of #111325?

[weltenwort]

@cyrille-leclerc could you specify what "log line details" are? A specific subset of the source fields? a subset of mapped fields? all of them?

[cyrille-leclerc]

@formgeist correct this request is a duplicate of the APM part of

• [APM Service Logs] Show flyout in LogsEmbeddable #111325

@weltenwort could you specify what "log line details" are? A specific subset of the source fields? a subset of mapped fields? all of them?

The fields of the log line are the things that matter the most to me, I wouldn't filter them to be sure we don't forget any and to be consistent with other visualizations of details (e.g. document details in Discover, span details in APM...). So I would say "all of them". Do you recommend to explore filtering fields?

I described other characteristics I would like to have on

• Logs flyout enhancements for use on APM service logs view #125869

[weltenwort]

I didn't realize this is duplicate of #111325. Which one will be the source of truth?

[cyrille-leclerc]

I didn't realize this is duplicate of #111325. Which one will be the source of truth?

I would say that this ticket is not specifying the solution, it's more an enhancement request, so I don't think it could contradict #111325 .
When we prioritize adding details to log lines, I guess we will clarify what the flyout will actually look like. Reusing the flyout of Observability / Logs / Stream makes a lot of sense to me. I think we would just have to confirm that we prefer to extend the existing "Observability / Logs / Stream" flyout rather than reusing the new Flyout that Discover introduced.

Does it make sense?

[weltenwort]

Ok - I'm still slightly confused which of these issues would serve as the implementation issue for the infra monitoring team.

I think we would just have to confirm that we prefer to extend the existing "Observability / Logs / Stream" flyout rather than reusing the new Flyout that Discover introduced.

Using the fly-out from the Logs UI would be pretty easy because it already uses a specialized search strategy for log entries. It would be my recommended approach.

[smith]

Using the fly-out from the Logs UI would be pretty easy because it already uses a specialized search strategy for log entries. It would be my recommended approach.

+1 to that. I'm very skeptical that the Discover flyout could be used in another context, as it probably wasn't designed with that in mind.

[smith]

Duplicate of #111325