# Logs table

The logs table is the default results view in Explore. It displays individual log entries as rows, with fields rendered as columns. Use the table to scan results, compare field values across entries, sort by specific columns, and open individual logs for deeper inspection.

## Configure content column fields

The **content** column is the primary display column for each log entry. It shows the log message or a subset of key-value pairs depending on your configuration.

To configure which fields appear in the content column:

1. Select **Manage columns** in the table header.
1. In the column management panel, find the **Content** section.
1. Add or remove fields to control what appears in each row's content cell.

Changes apply immediately to all rows in the table.

## Manage columns

Add, remove, reorder, and reset columns to customize what information appears in the table.

### Add columns from column management

1. Select **Manage columns** in the table header.
1. Search for a field by name, or browse the list.
1. Select the field to add it as a column.
1. Drag the field to reorder it in the column list.
1. Select **Apply** or close the panel to save changes.

### Add a column from a log entry

You can also add a column directly from an individual log entry without opening the column management panel:

1. Select a log row to open the log details panel.
1. Find the field you want to add as a column.
1. Open the field's context menu (three dots or hover actions).
1. Select **Add as a column**.

The column appears immediately in the table.

### Reset column layout

To restore the default column configuration:

1. Select **Manage columns**.
1. Select **Reset to default**.

This removes any custom columns and restores the original layout.

## Sort or remove columns

- **Sort**: Select a column header to sort by that column. Select again to reverse the sort order. An indicator shows the active sort column and direction.
- **Remove**: Hover over a column header and select the remove icon, or open **Manage columns** and deselect the field.

## Change row format

The logs table supports different row display formats to match your workflow:

- **Compact**: Shows one line per log entry. Use this to scan high volumes of results quickly.
- **Expanded**: Shows multiple lines per entry to display more of the log message. Use this when log messages are long and you need to read more without opening the details panel.

Toggle the row format using the display options control in the table header.

## Export logs

Export the current results to a file for offline analysis or sharing:

1. Select **Export** in the table header or Explore actions menu.
1. Choose the export format (for example, CSV or JSON).
1. Confirm the export.

The export includes the logs matching your current query and time range, up to the supported export limit.

## Row actions

Open the more actions menu next to any log row to access actions scoped to the whole log entry:

- **Custom Actions**: opens a list of [custom actions](https://coralogix.com/docs/user-guides/data_exploration/custom_actions/index.md) configured for your account.
- **Copy log**: copies the full log entry to the clipboard.
- **Copy log ID**: copies the log's unique ID. Use this to share a permalink, correlate with an external system, or paste the ID into a query.
- **Open info panel**: opens the [log details panel](https://coralogix.com/docs/user-guides/data_exploration/logs/info_panel/index.md) for the selected entry.
- **View surrounding logs**: opens a list of duration presets — **5 Seconds**, **30 Seconds**, **1 Minute**, **5 Minutes**, or **10 Minutes** — to load logs from the same source within ± that interval of the selected event. On the `rum.events` dataset, this action becomes **View surrounding events** and filters by `session_context.session_id` instead.
- **Copy permalink**: copies a URL that recreates the current query, time range, and selected log.

## Fields sidebar actions

Actions available from the **Fields** sidebar apply to the table view and modify the query or column layout.

### Show the graph for the key

| Entry point                                           | Result                                                      |
| ----------------------------------------------------- | ----------------------------------------------------------- |
| Fields sidebar context menu (three dots on any field) | Opens a time-series bar chart grouped by the selected field |
| Log details panel — key menu                          | Opens the same time-series bar chart                        |

The chart appears above the results table. Each bar segment represents a distinct value for the selected field. Select any segment to drill down into the underlying logs or filter the value in or out of your query.

This action is equivalent to adding the field as a **Group by** with a **Count** aggregation and visualizing the result as a stacked bar chart.

### Add as Grouping

Select **Add as Grouping** from the Fields sidebar context menu to add the field to the **Group by** clause in the Query Builder. The table switches from individual log rows to aggregated groups, showing each unique value and its count.

## Key-value context menu

Select a key or value in a log row to open a context menu of field-level actions. The available actions differ based on whether you selected a key or a value.

### Key menu

Select a field name in a log row:

| Action                         | Description                                                                                                                                     |
| ------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------- |
| **Custom Actions**             | Opens a list of [custom actions](https://coralogix.com/docs/user-guides/data_exploration/custom_actions/index.md) scoped to the selected field. |
| **Include in query**           | Adds the field as a filter on the current query.                                                                                                |
| **Exclude from query**         | Adds the field as an exclusion filter on the current query.                                                                                     |
| **Add as a column**            | Adds the field as a column in the logs table.                                                                                                   |
| **Add to favorite fields**     | Pins the field to the top of the [Fields sidebar](#fields-sidebar-actions) for the current source and dataset.                                  |
| **Copy full path**             | Copies the field's full path.                                                                                                                   |
| **Copy the key's value**       | Copies the field's current value for this log.                                                                                                  |
| **Copy the key:value**         | Copies the full `key:value` pair.                                                                                                               |
| **Show the graph for the key** | Opens a time-series bar chart grouped by this field. See [Show the graph for the key](#show-the-graph-for-the-key) for chart behavior.          |

### Value menu

Select a field value in a log row:

| Action                          | Description                                                                                                                                             |
| ------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Custom Actions**              | Opens a list of [custom actions](https://coralogix.com/docs/user-guides/data_exploration/custom_actions/index.md) scoped to the selected value.         |
| **Include in query**            | Adds the field-value pair as an inclusion filter on the current query.                                                                                  |
| **Exclude from query**          | Adds the field-value pair as an exclusion filter on the current query.                                                                                  |
| **Query value**                 | Replaces the entire query with a single filter for this value. Use this to pivot to a fresh search on the selected value without keeping prior filters. |
| **Copy full path**              | Copies the field's full path (for example, `cx_rum.session_context.session_id`).                                                                        |
| **Copy value to the clipboard** | Copies the field value.                                                                                                                                 |
| **Copy key**                    | Copies the field name.                                                                                                                                  |
| **Value across time**           | Opens a time-series chart of how often this field-value combination appears across the query's time range.                                              |
| **Live tail**                   | Opens [Live tail](https://coralogix.com/docs/user-guides/data_exploration/logs/livetail/index.md) filtered to the selected field-value pair.            |

## Next steps

Inspect a single log event in depth — and use the per-field [Row actions](https://coralogix.com/docs/user-guides/data_exploration/logs/info_panel/#row-actions) menus for keys and values — in the [Log details panel](https://coralogix.com/docs/user-guides/data_exploration/logs/info_panel/index.md).