Tags

Navigation Notice: When the APM Integrated Experience is enabled, Loggly shares a common navigation and enhanced feature set with other integrated experience products. How you navigate Loggly and access its features may vary from these instructions.

Tags are great for adding organization to your log events to aid in segmentation & filtering. They are metadata you can set on the source side, and they can be included with any event that is transmitted to Loggly.

Setting Up Tags

Syslog

Example of tags sent within a syslog header. Multiple tags are inserted using multiple fields.

HTTP

Example of tags sent through the HTTP API. Multiple tags are separated by commas.

The HTTP header X-LOGGLY-TAG allow clients to tag log messages with 1 or more comma-delimited tags. If both the HTTP header is set and the URL contains tags, the tags are a union of the both. The general format of the field is:

X-LOGGLY-TAG: foo,bar,myApp

Searching

Tags can then be used to form Source Groups, which will help segment your data and narrow search results. It’s also possible to search your log data for tags with a search query. When searching tags with a period in them put the name of the tag in quotes.

tag:sample
tag:"abc.xyz"

Tags will be displayed within the Search screen as any other field would:

Restrictions

Tag values are always considered strings, even if the value is entirely numeric. The valid character set for a tag value includes all alpha-numeric characters, dash, period, and underscore.

The first character of a tag may only be alpha-numeric. The maximum length of an individual tag is 64 characters. If any of these restrictions is violated, the tag is stripped from the event. However, the event is still indexed as normal.

Examples
The following are valid tag values.

x
server1
us-east
my_server
1234_zone
www.loggly.com
apache

The following are invalid tag values.