[Feature request]Logs app separate layout per index

[Sjaak01]

Hi,

I recently started using the Logs app and I think its a great way to view and search through logs that don't necessarily work very well with the Kibana visualizations or if somebody just needs to copy part of a raw log.

However one drawback for us is that we have logs from many different sources so while I can add the indexes and add the fields, this quickly becomes hard on the eyes because not all our data matches the common naming scheme so we have to add our own fields. This doesn't work well when there can be 15+ fields that we need to show at the same time.

A work around is to create a different space for each log but asking users to switch spaces is a bit of a pain. Another option would be to merge multiple fields in a single message field but that would create hard to read logs.

I would like to see a simple menu, something like a drop down box, that allows you to select a different "log view". So you can create a "log view" for device1 that shows field x, y, z and a view for device2 that shows fields a, b, c etc.

[elasticmachine]

Pinging @elastic/logs-metrics-ui (Team:logs-metrics-ui)

[weltenwort]

Thank you for describing your use-case so well. This is highly related to #20662 and a solution to it would hopefully also work for you. After #84725 there will be some significant changes to the way the Logs UI is configured, so it might be a good opportunity to also finally add support for multiple source configurations in the UI. (Technically it already is supported.)

[smith]

#120920 should address this.