Release notes

Code Agents Observability is now Code Agents Intelligence. The Claude Code dashboard adds a dedicated Cost tab that shows where spend goes and where to cut it — total cost and cost change, average cost per session, cache hit rate, token breakdown, cost by model, top spenders, and ranked optimization insights. You can now also capture prompts and model responses into the admin-only AI Claude Sessions dataset to see what each session actually produced. Learn more

Save as a separate view — Open the tab's menu and select Save as to save your current state without overwriting the loaded view. Learn more

Tab labels — Ad-hoc query tabs are now numbered Explore (1), Explore (2), and so on, until you save them. Learn more

Duplicate a tab — Open the tab's menu and select Duplicate to work on a copy of the tab without affecting the saved view. The clone is suffixed (copy) and unlinked from the source view. Learn more

Export from any grid — Export is now available on the Traces, Templates, and Overview tabs, alongside Logs and Spans. The three added surfaces export the rows currently loaded client-side; Logs and Spans export server-side up to 10,000 rows. Learn more

Export aggregated and grouped results — The Overview tab renders aggregated and grouped results from both Builder and DataPrime modes and supports export. Builder mode exports as CSV or TSV; DataPrime mode also supports JSON. Learn more

Entity-aware copy on the Spans tab — The Export dialog and toasts use span-specific wording on the Spans tab (Span count, Exporting spans..., Spans exported successfully). Learn more

File-name validation — File names accept letters, numbers, and ., _, or - only, up to 255 characters. Invalid characters show an inline error and the Export button stays inactive. Learn more

Olly's investigation is now visible live in the chat as an Execution plan, with each step labeled, timed independently, and expandable to reveal Olly's reasoning, tool details, and any charts or tables it produced along the way. When Olly finishes, the header switches to Execution summary and the steps stay open for review. Learn more

A new Ask Olly button in the trace drilldown header opens the Olly side drawer with the current trace already in context — trace ID, selected span, service, operation, duration, and timing. Five trace-scoped suggested queries help you go straight to root cause, latency, downstream failure, deployment correlation, or a next debug step in a single click. Learn more

The Top 5 time consuming transactions widget on the Service Catalog drilldown Overview tab adds a visualization toggle when Over time is selected. Pick Individual (default) for one line per transaction, or Stacked for an area chart showing the five transactions summed at each point. Your selection persists across reloads via the page URL and your browser's local storage. Learn more

Five new MCP tools (olly_ask, olly_list_chats, olly_get_chat, olly_list_artifacts, olly_get_artifact) let you send investigation requests to Olly from Cursor, Claude Code, or Codex and get back answers plus downloadable artifacts (logs, traces, metrics, alert data, Kubernetes queries).

Olly is opt-in. Add the x-allow-costly-use: true header to your MCP server configuration to expose the tools — without it, they are not advertised. Olly tools are v2 only.

Learn more

The Service Catalog drilldown now includes a Runtime metrics tab for Java services. The tab brings JVM internals — heap memory, garbage collection pauses, thread states, CPU usage, and class loading — onto the same screen as your traces and span metrics, so you can correlate latency spikes with GC pauses, distinguish memory leaks from allocation pressure, and isolate one bad pod from the cluster. Available for services that emit JVM metrics in the OpenTelemetry semantic-convention format. Learn more · Send JVM metrics

Heap memory profiles — Investigate live retained memory in your Java services with the new Heap bytes and Heap objects profile types, available alongside Allocated bytes and Allocated objects in the service drilldown and the Profiles catalog. The Profiles catalog memory view also adds Avg. heap bytes, Heap bytes, and Heap objects columns. Learn more

Wall-clock profiling — Find latency that does not show up in CPU profiles. The CPU card on the service drilldown now offers a Wall variant alongside mCore, and the Profiles catalog CPU view exposes new Avg. wall and Wall samples per second columns. Learn more

Preview a TCO policy's impact before you save — The log policy form now includes a Preview panel that shows how your current filter and priority match recent data. See live Data sent and Total units estimates for the last 24 hours or 7 days, break matched data down by application, subsystem, and severity, and review volume and units over time. Learn more

Stream live logs in Infrastructure Explorer — The Logs tab in a resource's drill-down now includes a LiveTail mode that streams incoming log lines in real time, automatically scoped to the selected resource. Switch between Query and LiveTail modes, refine the stream, and choose which fields to display, without leaving the resource you are investigating. Learn more

Olly now runs a single chat mode in the Coralogix UI — no more picker for Pro, Focus, or Fast. The single mode is built on the same skill-based architecture, defaults to GPT-5.4, and handles both quick lookups and deeper investigations. GitHub repository context is available across all chats.

The Olly API keeps focus and fast as accepted interaction_mode values for backwards compatibility — both route to skill. Migrate existing integrations when convenient. Learn more

Multi-step quota-based routing — A quota-based log policy can now define up to three priority tiers (for example, High → Medium → Low) with a configurable default priority, so data degrades gradually as your daily quota fills instead of dropping straight to Block at a single threshold. Learn more

Unit-Based Quota Reservations (Locked Units) — Reserve a fixed number of units for an entity type with the new Locked Units mode. Reservations stay absolute across plan changes and team quota transfers, and Coralogix-managed entity types appear read-only to team admins. Learn more

Org Quota Manager export — Export your organization's quota allocation and consumption from the Quota Manager as a single unified CSV. Choose an Overview or Detailed Daily report and a unit type (Units, GB, or Events), scoped to the active pillar and time range. Learn more

Right-click any frame in the flame graph on the service-drilldown Profiles tab to open a context menu with four per-frame actions. The menu is available in both Explorer and Compare modes. Learn more

Two new commands — cx docs search <query> and cx docs fetch <suffix> — search and read the Coralogix documentation portal directly from your terminal. Use --limit to widen the result set and -o json or -o agents for machine-readable output.

No API key is required — the docs portal is public. The same lookup is also available in the Coralogix MCP server as search_docs and fetch_doc.

Learn more

The new Releases page replaces the Versions page with a release-centric view of your application's health. Every release is its own row with adoption, crash free rate, crashes, and error templates, and a per-release drilldown shows the health chart, top errors, and Web Vitals or mobile performance for that release. Learn more

Cap daily ingestion on system datasets — System datasets now support a per-dataset quota limit, set as a percentage of available daily quota or as an absolute CX Units value. Ingestion halts when the limit is reached and resumes at 00:00 UTC. Learn more

Drive Olly from your own backend with the public Olly API. Trigger investigations, send prompts, and retrieve the query results Olly generates — all using the same models, skills, and permissions as the in-product chat. Personal and team API keys are both supported. Learn more

Admins can now define team-wide skills that Olly applies for everyone in the team — runbooks, response templates, or any reusable instructions you'd otherwise re-create as a personal skill. Manage them from the new Team tab on the Skills settings page, alongside your personal skills. Up to 10 team skills per team. Learn more

Tag every permutation of a grouped SLO with Service, Environment, and Team at creation time — set a value for the whole SLO group, or derive each value from a label in the query so the tag follows the data. Available on APM, event-based, and time window SLOs, with matching Service, Environment, and Team columns on the SLO grid. Learn more

Control who can log in to your team by listing the IP addresses and email domains allowed to access it. The new Login access policy page has two tabs — IP access for IPv4 addresses and ranges, and Domain access for email domains (currently in limited access). Each list is opt-in: it starts enforcing only after you add the first entry. Learn more

A new MCP server version with a cleaner, AI-agent–optimized experience. To opt in, send the mcp-version: v2 header — see Setup. v1 is deprecated and will be removed.

• Sharper tool set — shorter tool descriptions and token-optimized outputs.
• Improved field discovery — semantic field search by description, plus value search through the new search-by-value API ($d / $l / $m DataPrime paths).
• Better schema and metric discovery — refreshed get_schemas, search_metrics, and get_metric_details.
• Stricter input validation — fewer silent failures and clearer errors.

Filter the flame graph and the stack-trace table on the service-drilldown Profiles tab to your own application code with the new Show only user code toggle, next to the Color by dropdown. The toggle is on by default, so library, runtime, native, and kernel frames are hidden from view — letting you focus on actionable code paths the moment you open a profile. The filter applies in Explorer and Compare modes, and to both CPU and memory profiles. Learn more

Response Time KPIs (general availability). Set Time to Acknowledge and Time to Resolve targets per case priority in Cases settings. Cases that miss a target appear under the Needs attention filter on the Case list, are logged as KPI Breached events on the case Activity timeline, and surface a KPI status field on notifications routed for the Case. Learn more

A new Overview tab on the spans dataset renders aggregated span queries as sortable tables or charts — rank services by error count, surface the slowest operations, or see status-code distributions at a glance. Learn more

A redesigned sign-in flow is now in early access. The new docs cover how the available methods combine and how the email-and-password flow works end to end.

Login methods overview — Compare local login, SSO with SAML, and two-factor authentication, and see how entry points (team URL vs. generic dashboard URL) shape the sign-in experience. Learn more

Local login — Sign in with email and password, complete two-factor authentication if enrolled, reset your password, and troubleshoot common sign-in errors. Learn more

Break the spans matching your query down by field in a dedicated Highlights tab. Switch between Duration, Errors, and Total Requests views, and toggle Compare to previous period to surface regressions side by side—a Diff column ranks fields by how much each value changed between the two windows. Learn more

A new Signals tab on the spans dataset surfaces Rate, Errors, and Duration for the active query. A button group at the top of the tab switches between Outliers—latency percentiles, error counts, and individual span samples overlaid on a single chart—and RED metrics—Rate, Errors, and Duration as three side-by-side charts. Each chart has its own configuration, and selecting any data point opens the span drilldown on the most representative span for the active aggregation. Learn more

File attachments for Olly chat now accept .md files alongside the existing text-based formats (.pdf, .txt, .json, .csv). Learn more

The Info Panel Performance section now surfaces service-level signals for the span's service, scoped to a 15-minute window around the span's start time. New fields include SLO Status (shown as X OK, Y BREACHED), Health (Healthy, Critical, Warning, or Unmonitored), and Incidents (count of active incidents, with a View Incident link per incident). Each field has a View APM Service catalog action that opens the catalog filtered by the service. The Infrastructure tab in Span related data also shows live pod and node status inline. Learn more

Create your own custom skills — short Markdown files that teach Olly your team's workflows, terminology, or response style. Olly applies them when relevant, and you can also pick a skill directly in chat. Write skills from scratch in the settings UI or upload existing .md files. Up to 10 custom skills per user. Learn more

Admins can now define team-wide rules that Olly applies across every user in the team — for example, prioritizing production data or flagging security issues first. Team rules sit alongside personal user rules and take precedence when guidance conflicts. Learn more

In the Trace Drilldown, the Color by, Depth, and Trace layout controls now appear as dropdowns directly in the action bar, so you can change them in one select instead of opening a menu. Gantt view exposes Color by and Depth; Flame view exposes Color by and Trace layout; Dependencies Span view exposes Color by. On smaller screens, the same controls remain in the menu. Learn more

Manage actions panel — Open the kebab menu in the Explore query bar and select Manage actions to create, edit, and organize custom actions in Private and Shared sections. Learn more

URL templates with $d, $m, $p — Build clickable jumps from a log to a trace, span, RUM session, Grafana board, or Jira ticket using placeholders for log fields, Coralogix metadata, and page context. JavaScript expressions and bracket notation for special-character field names are supported. Learn more

Filters and access controls — Scope actions by application, subsystem, or data type, and choose Private or Shared access when saving. Learn more

Olly Pro mode now supports Gemini 3.1 Pro and Gemini 3 Flash. Select Gemini from the model dropdown in the Olly chat input bar while in Pro mode. See Model selection and pricing for per-model rates.

In the Span related data Logs tab, the View query drawer now shows the correlation query in two formats — DataPrime and Lucene — for the Span, Trace, and Service views. Custom view stays Lucene-only because custom field mappings don't translate to a standard DataPrime expression. Copy either query, or select Open in Explore Logs to run it in the full logs experience with the time range preserved. Learn more

AI Explorer now links each LLM span to the user's RUM Session Replay. Open a span and select Watch session to jump to the recording of the user's frontend activity, scoped to a 60-minute window around the AI interaction. The integration works when the Coralogix RUM SDK is installed on the frontend triggering the LLM call and trace context propagates through to the LLM backend. Learn more

AI Center now natively ingests the standard OpenTelemetry GenAI semantic conventions — no Coralogix-specific SDK required. Instrument with any open-source library that emits gen_ai.* attributes (OpenLLMetry, OTel contrib, Microsoft.Extensions.AI, and others), or create spans manually. Both the new (v1.37+) and legacy (v1.28–v1.36) formats are supported. Learn more

Slack integration v0.1.0 (public preview) — Connect Coralogix Cases to your Slack workspace with two-way comment sync, rich Case URL previews, higher Slack delivery throughput, and installation without Slack admin scope. Default version for new Slack integrations. Learn more

JSON export — Download Explore V2 query results as JSON, alongside the existing CSV and TSV formats. Use JSON when you need to feed downstream tooling or preserve the nested structure of fields exported under All logs. Learn more

Slack integration v0.1.0 — New Coralogix Slack app, available in public preview and now the default for new Slack integrations. Brings two-way Case comment sync, rich Coralogix Case URL previews, higher Slack delivery throughput, and installation without Slack admin scope. Existing integrations on earlier versions continue to deliver. Learn more

Saved views in Infrastructure Explorer — Save the current query, filters, table settings, widget state, and time range as a reusable view, then reload it from All views. Lock the time range, set a default view, and share a view by copying its URL. Learn more

Pro mode is a new chat mode built on a skill-based architecture that applies specialized skills to each request — the same pattern modern AI agents use for complex tasks. It delivers faster and higher-quality answers than Focus mode for most observability work. Pro mode currently shares Focus mode's model list, with additional model support rolling out. Learn more

Cases analytics (early access) — Track operational performance directly from the Cases page. The new Analytics tab summarizes MTTA, MTTR, and MTBI across the selected range, breaks the same metrics down by Team, Service, Priority, or other dimensions, and lets you save analytics views with their filters and time range. Contact Coralogix Support to opt in. Learn more

Manage infrastructure health rules — Define a rule once and Coralogix continuously applies the selected health policies to every current and future resource that matches your scope. Filter by Service, Environment, and Team ownership tags, exclude individual resources, and review which rules apply to a resource directly from its details drawer. Learn more

New unified manage_* tools that let you create, read, update, and delete configurations across more of the Coralogix platform from your AI agent:

• Alerting — manage_alerts_scheduler (alert suppression rules) and manage_webhooks (outbound webhooks).
• Metrics — manage_recording_rules_groups_set (recording rules) and manage_events2metrics (Events2Metrics).
• SLOs — manage_slo_v2s.
• TCO Optimizer — manage_tco_log_policies and manage_tco_trace_policies.
• Notification Center — manage_connectors, manage_presets, and manage_global_routers.
• Access control — manage_custom_roles.

See the full list in the MCP tools overview.

View lifecycle events for a resource — Track resource creation, updates, keep-alive signals, and removal directly from the Infrastructure Explorer drill-down. Filter by source or event type to investigate configuration changes, confirm resource availability, and trace issues using a clear activity timeline. Learn more

AI Center alerts and metrics — Deploy a prebuilt observability pack for AI applications. The AI Center Alerts extension installs five events-to-metrics that convert AI spans into Prometheus-style metrics, plus five metric threshold alerts on top of those metrics — covering error rate, latency, cost spikes, security issues, and quality issues. Use the alerts as-is, customize them, or query the metrics directly to build your own alerts and dashboards. Learn more

When a trace contains a cyclic dependency — a request that flows back through a service or span that already called it — the back-pointing edge automatically renders as a dashed line in both Service view and Span view of the Trace Drilldown Dependencies view. The dashed edge appears whenever the cycle exists; there's no toggle to enable. Use it to spot request loops that signal architectural issues and complicate troubleshooting. Learn more

A new Relation option in the Spans query builder lets you find spans based on their position within a trace. Choose from seven relation types — Root, Only root, Parent, Entry service, Child, Any, and Not any — and combine multiple filters with AND or OR. The builder generates the matching DataPrime relational query automatically, so you can switch to DataPrime at any time to inspect or refine the query. Learn more

The Service Catalog now shows Last seen, Status, and Environments columns. Sort the list by most recent activity, filter for services that are Active or Inactive within the selected time range, and expand any service with the chevron to see per-environment last-seen times. Services with no metrics within the retention period (30 days by default, configurable) are hidden automatically. The Type column has been removed. The Environment filter inside a service drilldown now shows the service's own environment count and preserves your catalog selection on entry and exit. Learn more

Profile memory allocations in Java services using the Coralogix Continuous Profiler SDK and Async Profiler. The Profiles catalog and service drilldown now support a Memory profile type alongside CPU. Learn more

Linked widgets — Reuse widgets across Custom Dashboards without recreating them. Browse the Widgets library to find widgets across your team's dashboards, drag one into your dashboard, and it appears with a purple Linked badge. The widget stays in sync with the source and updates automatically when the original changes. Use Go to source dashboard to view the source, or Unlink to convert it into a standalone, editable widget. Learn more

This feature is in early access and available to selected customers. Contact your account manager to request access.

Attach files to a chat message to give Olly additional context for your prompt — for example, a screenshot of an error, a configuration file, or a CSV of metrics. Up to 5 files per message, 5 MB per file. Supports images (.jpg, .png, .svg, .web) and text-based files (.pdf, .txt, .json, .csv). Learn more

Quick actions on graph elements — Right-click a span in Flame or Gantt, or select the 3-dots icon on a node in Dependencies, to pivot between views, open Highlights, or jump to APM. Service-view nodes in Dependencies expose APM Service Catalog, APM Service Operation, APM Database, APM Database Operation, and APM Serverless depending on service type. Gantt quick actions also include Show Surrounding Spans for traces beyond the time range or span limits. Learn more

New Dependencies controls — A new Node detail toggle in the Dependencies more actions menu controls how much information each node shows (Compact / Standard, default Standard). The 20,000-span cap now also applies to Dependencies (Span view and Service view), matching Flame and Gantt. Learn more

New RUM Overview page provides a fleet-wide view of every monitored web, mobile, and Micro-Frontend (MFE) application, with per-app drilldown for top errors, releases, and performance. Available for early-access customers — contact your account representative or Customer Support to request access. Learn more

APM entity links from a Case — Select the APM entity chip in the Case header to open APM Service Catalog for that service, with the time range already scoped to the Case time range. In multi-permutation Cases, every entity has its own link in the header and in the Triage Groups list. Learn more

Open Cases preserves filters and timeframe — From the Related cases panel inside a Case, Open in Cases lands on the full Cases view with the same filters and time window already applied via the URL. Learn more

Unacknowledge — Move an acknowledged Case back to Active when triage shifts or another teammate needs to take over. Learn more

Cases saved views — Save the current query, filters, table settings, favorite fields, and time range as a reusable view, then reload it from All views. Set a default view, lock the time range, clone a view to fork a workflow, and share a view by copying its URL. Learn more

Use the new case_find function for shorthand case expressions with text match (~) logic. Learn more

case_contains now correctly evaluates clauses with contains() substring matching, aligning the implementation with its documented behavior. If your query relied on the previous text-match behavior, switch to case_find. Learn more

Background Queries v2 — Redesigned queries grid replaces the card view, with new columns for Action, Partitioning, Entity type, Destination dataset, Results, Data ingested, and Execution duration. Submissions can save results to a user-defined summary dataset (Persistent) for reuse in Explore, Custom Dashboards, and the API — or keep the existing 30-day Temporary behavior. Save with Append (add to the current dataset version) or Overwrite (new version, history retained). Available in Preview alongside v1, with the v1 page now carrying a sunsetting disclaimer. Learn more

Entity types reference — New conceptual page covering the six data pillars (logs, spans, metrics, data, binary, profiles), schema guarantees per pillar, and how entity types are produced via ingestion, DataPrime, and Lucene. Learn more

Preview the Terraform and Kubernetes YAML representation of any saved rule group. Open from the rule list ⋮ more actions menu → View as Code. Tabs for Terraform (default) and K8s, with copy, download, search, and collapse/expand controls. Learn more

Customizable columns and grouping keys — Per-team listing grid that lets you add, remove, resize, and reorder columns, and surface grouping keys (service, deployment, instance) as first-class columns. Save the layout as a Cases saved view to share it with your team. Learn more

Selecting Add SLO from the SLO tab of a Service Catalog drilldown opens the SLO Center create drawer with the SLO type set to APM and the service pre-filled for the service you are viewing. After you save, the SLO Center opens with the new SLO in the list. Learn more

Renamed to Explore spans — Explore Tracing is now Explore spans, reflecting a span-first investigation flow. Learn more

Three tabs, one investigation — Spans, Traces, and Flows share the same query, time range, and filters. Switch tabs as your question changes—from operation-level (Spans) to request-level (Traces) to topology (Flows). Learn more

Span kind column — The Spans tab surfaces the OpenTelemetry span kind (SERVER, CLIENT, PRODUCER, CONSUMER, INTERNAL) with a directional arrow next to each row. Filter by kind to focus on inbound or outbound activity. Learn more

Span-aware query builder — The query builder gains an Errors toggle, a Duration filter (in ms or percentile), and span-relationship filters (Root, Only root, Parent, Entry service, Child, Any, Not any). Toggling Errors or applying a Duration filter runs the query automatically. Learn more

Connect a GitHub repository to Olly for code-aware investigations and root cause analysis. In Focus mode, Olly can trace logs, errors, and alerts to specific files and lines, explain what changed, and suggest targeted fixes. Learn more

New APM SLO type — Define reliability objectives directly from a service: choose Errors or Latency, apply filters, set the time frame and target, and let Coralogix manage the underlying queries and metrics. No PromQL required. Learn more

Redesigned Preview panel — As you fill in the SLO form, the Preview validates your queries in real time, ranks the worst-performing permutations, and surfaces an AI smart-tip that suggests an achievable target along with metric-fit and query-shape guidance. Apply all suggested corrections at once with Fix all. Learn more

APM latency is now displayed as absolute duration (ms/s) instead of percentages, and broken down into Avg, P50, P75, P90, P95, and P99 — making tail-latency outliers easier to spot. Select the aggregation to display in the Service Overview, Transactions, Operations, and Dependencies views. Powered by your existing spans and distributed traces — no setup required. Learn more

Data Usage settings panel — A new slide-in panel consolidates the controls that govern Data Usage visibility. Open it from the Data Usage page to enable the data usage metrics pipeline and manage the new usage events dataset. Learn more

dataplan.usage_events system dataset — Aggregated team data usage events are now exposed as a queryable system dataset. Enable ingestion from the settings panel and analyze consumption directly in Explore or Custom Dashboards with DataPrime. Learn more

Generate customizable usage reports from the Data Usage page. Configure file name, date range, tabs, format (CSV, TSV, or JSON), and report type (Overview or Detailed). Overview reports can apply the current table filters and grouping when exporting a single tab. Multi-tab exports are bundled into a ZIP archive for CSV/TSV or a hierarchical JSON file. Learn more

Usage values across Metric usage analysis now appear as bytes alongside CX units. The top stats row of each drilldown shows Cardinality, Usage (bytes + CX units), and Samples so you can reason about raw data volume and billing impact from the same view. Learn more

Sample Log mode now uses the same side-by-side diff component as the main Analyzer view. Paste a raw log, select Analyze pipeline, and step through each rule in the Applied rules list to see pre- and post-rule states with diff highlighting. Toggle Show only differences to filter out unchanged lines. Learn more

Current Usage and Historical Trend columns — The Quota Rules table now shows usage in two dedicated columns. Current Usage displays today's consumed units and a progress bar with warning and blocked states relative to each entity type's allocation (or the unallocated pool). Historical Trend shows a 7-day sparkline so you can spot patterns at a glance. Learn more

Dashboards List and Folders — Dashboards are now organized in a folder-based catalog. Create folders, drag dashboards between them, rename dashboards and folders, and search across your entire catalog from the Dashboards List panel. Use the All Dashboards link in the dashboard header to navigate back to the list at any time. Learn more

Auto refresh — Set a refresh interval (1m, 2m, 5m, 15m) on any Custom Dashboard to reload widget data automatically. Visual Explorer supports additional short intervals (15s, 30s). Use the pause/play controls to temporarily stop refresh without changing the selected interval. Learn more

X-axis and time-axis date format — Control how time labels appear on the X-axis of Vertical Bar Charts and Heatmaps with a new Date Format dropdown. Choose from 8 formats including Auto (adaptive), DD/MM, MM/DD, HH:mm, and combined date+time variants. Learn more

Variables: Sort None and metric label improvements — Static variable values now support Sort: None to preserve user-defined order—useful for interval variables such as 1m/5m/15m. The metric name is now optional when creating a Metric label variable. Variable value previews are capped at 1,000 results with substring search as a fallback. Learn more

Sub-daily scheduled reports (limited beta) — Schedule dashboard PDF reports every 4, 8, or 12 hours in addition to the existing daily, weekly, and monthly options. Contact support to enable sub-daily scheduling for your team. Learn more

New models supported: GPT-5.4 mini and Claude Sonnet 4.6. See pricing for per-model rates.

Source Maps: Flutter — Upload Dart symbols, dSYMs, ProGuard mappings, and JavaScript source maps for your Flutter applications using the Coralogix RUM CLI. Translate obfuscated stack traces back to your original source code across Android, iOS, and web targets. Learn more

New Dependencies view visualizes how a request flows through your architecture at the service or span level, with Color by, Group by, Aggregation, an on-graph toolbar, and a minimap. Clicking a service name in the span header opens a searchable dropdown of spans in that service. The Trace Drilldown now opens in Gantt view by default. Learn more

You can now pick a specific model in each mode instead of choosing a provider. Focus mode offers four higher-tier models and Fast mode offers two lower-tier models, with a recommended default in each. Your selection persists across chats and sessions. Learn more

New models supported: GPT-5.4 and GPT-5.2 in Focus mode. See pricing for per-model rates.

Enable Continuous Profiling for workloads running on AWS ECS clusters backed by EC2 container instances directly from the AWS ECS-EC2 OpenTelemetry onboarding flow. Learn more

Cora AI is being deprecated. All Cora capabilities — DataPrime Query Assistance, Explain Log, and Knowledge Assistance — are now available in Olly, the Coralogix AI observability agent. All future development and documentation will be in Olly. Learn more

Olly documentation is now part of the Coralogix documentation portal. All Olly docs have been updated to reflect Olly as a built-in Coralogix feature, including new sections for Olly chat, model selection, and integrations with GitHub and Slack. Learn more

Enhanced log-to-span correlation with a new three-field mapping (Logs, Span, Service) and a View by selector with four options: Custom, Span, Trace, and Service. Custom view correlates logs using your own field mappings, while Span, Trace, and Service views use standard OTel fields automatically. Learn more

Stat Widget — Display a single key metric with color-coded thresholds, value mappings (Range, Value, Regex), and multi-value mode. Supports the new Datetime ISO unit type for converting Unix timestamps to human-readable format. Learn more

Absolute timestamp variables for Custom Actions — Two new variables, $p.timeRange.startTimestamp and $p.timeRange.endTimestamp, output absolute Unix timestamps regardless of whether the dashboard uses a relative time range. Use them for cross-module drill-downs where the target requires absolute timestamps. Learn more

Filter In and Filter Out for Dynamic Widget table view — Right-click any cell value to filter results directly from the table without editing your query. Includes documented limitations for URL persistence, multi-query (join) tables, and text/JSON views. Learn more

Variables improvements — Static variable values now support a Sort: None option to preserve the exact order values were defined, which is useful for interval variables such as 1m, 5m, and 15m. Metric label variables no longer require a metric name; if left blank, label names are fetched across all available metrics. The values preview shows up to 1,000 results, with substring search available when results are truncated. Learn more

Date Format for time-axis bar charts — Vertical bar charts with a time-based X axis now include a Date Format setting. Select from eight display formats, including Auto (adaptive), date-only, time-only, and combined date and time options. Learn more

Auto refresh for Custom Dashboards — Set a refresh interval to automatically reload all widget data at a fixed cadence. All widgets in the dashboard refresh together. Supports intervals of 1m, 5m, and 15m, with additional 15s and 30s options in Visual Explorer. Refresh pauses automatically when the browser tab is not in focus. Learn more

Anomaly detection learning period — Documentation clarifies when an anomaly detection alert becomes active and which alert changes trigger a new 7-day learning period. Changing the metric query, filter, or core condition logic retrains the model; changing deviation percentage, notifications, labels, or priority does not. Learn more

GCS archive support for US3 — connect a Google Cloud Storage bucket as your Coralogix archive destination in the US3 (us-central1) environment. Learn more

Active and Opened tabs — Filter Cases by recent state changes or by creation time using the Active and Opened tabs in the Cases home screen. Active shows Cases with any state change in the selected time range; Opened shows only Cases created in the time range. Learn more

The Coralogix CLI (cx-cli) is now available. Query logs, metrics, spans, and Real User Monitoring (RUM) data from the terminal using DataPrime and PromQL—built for humans and AI agents. Includes multi-profile fan-out, AI-friendly output formats, and bundled skills for Claude Code, Cursor, Codex, and 40+ more agents. Learn more

Route logs to user-defined datasets via TCO Optimizer — TCO policies now support a Target Dataset field. Select a user-defined dataset as the routing destination so logs matching your policy filters land in an isolated dataset instead of default/logs. Learn more

User-defined datasets — Create custom datasets under the default/ dataspace to isolate log streams, prevent schema collisions, and apply dataset-level access control. Route logs to a dataset via a TCO policy, then query it with source default/<dataset-name> in DataPrime or select it from the data source selector in Explore. Per-dataset usage appears in Data Usage. Learn more

Configuration templates — Generate production-ready OpenTelemetry Collector configurations from environment-specific templates, without writing YAML from scratch. Learn more

Configuration fallback — Set up S3-based configuration fallback so agents always have a working configuration, even when Fleet Manager is unreachable. Learn more

Upgrade configurations — Upgrade template and Collector versions across your fleet using the one-click upgrade workflow. Learn more

Fleet Management for Linux hosts — Enable remote configuration for OpenTelemetry Collectors deployed on Linux hosts using the Supervisor and OpAMP. Learn more

Config Navigator V2 pipeline graph — Updated pipeline visualization with improved layout and component detail. Learn more

Search and filter resources with Lucene Builder — Filter infrastructure resources using Builder mode for structured, chip-based filtering or Lucene mode for raw query syntax. Supports string and numerical operators, free text search, AND/OR logic, keyboard shortcuts, and shareable filtered URLs. Learn more

Enable diagnostic logs for fair usage limits — Step-by-step guide to enable the labs.limitViolations dataset and troubleshoot data discrepancies in Infrastructure Explorer, including when to enable diagnostic logs, expected propagation times, and cost considerations. Learn more

GCP Private Service Connect — send data from your GCP workloads to Coralogix privately, without traffic crossing the public internet. Learn more

Schema Explorer now shows an AI-generated description for each field in the Explore tab. You can edit descriptions for user-defined fields, while OpenTelemetry and system fields stay read-only to preserve standard conventions. Learn more

Created time filter — Filter Cases by when they were created, independent of when their status last changed. Use this when you want to see only the Cases that opened in a specific window. Learn more

ServiceNow comment sync — Comments and resolution notes added on a linked ServiceNow incident flow into the Coralogix Case Activity timeline in real time. Learn more

Suppression rules on the Case — When a backing alert is affected by a suppression rule, the Case surfaces which rules apply with a deep link to each rule. Mute the alert definition directly from the Case header. Learn more

AI agent interactions in Quota Rules — The olly entity type is now supported in Quota Rules. Set enforced daily caps on AI agent interactions alongside logs, metrics, spans, and other entity types to control AI usage costs and prevent unexpected overages. Learn more

Quota Manager — View team quota consumption with a new team overview graph. Filter and group by team and entity type, toggle between units and GB sent views, and enable the annotations layer to see when blocking occurred. Learn more

Alerts management via MCP — Create, read, update, and delete alerts across 12 alert types from your AI coding environment, and generate Terraform HCL, Kubernetes Operator YAML, and OpenAPI definitions for any alert. Learn more

Parsing rules management via MCP — Create, read, update, and delete parsing rules across 10 rule types, and generate Terraform HCL, Kubernetes Operator YAML, and OpenAPI definitions for any rule. Learn more

Notification evidence — The Activity tab now records every notification the Case sent through Notification Center (Slack, ServiceNow, email, and more), with a one-click link that opens the matching thread, ticket, or email in the destination system. Learn more

New Explore Logs — The Explore Logs experience has been fully redesigned. Navigate logs and spans from a unified interface with improved search, a rebuilt query builder, an enhanced logs table, and a detailed info panel. All legacy Explore Screen and Logs Screen pages redirect to the new experience. Learn more

Select a Data Source — Choose between dataspaces, datasets, and system datasets from a new data source selector at the top of Explore. Learn more

Get Started with Explore Logs — A new quickstart guide walks you through search, filtering, visualization, and saving views in a few steps. Learn more

Query Builder — Group by fields and apply aggregation functions to analyze log data without writing queries. Drilldown into grouped results to explore the underlying logs. Learn more

Logs Table — Configure the content column, manage column visibility and order, set row format, export data to CSV, and interact with field values directly from table cells. Learn more

Log Details Panel — Inspect individual log entries with correlated observability data including related logs, traces, and resource metrics. Use Explain Log for AI-powered log analysis. Learn more

Filter with Fields — Use the Fields panel to filter logs by any indexed field. View field statistics, top values, and field distribution directly in the panel. Learn more

Visualize Log Data — Switch between chart types to visualize query results. Configure chart settings, interact with data points, and build DataPrime-powered visualizations. Learn more

Analyze Log Patterns with Loggregation — Group logs into templates to identify patterns, reduce noise, and surface anomalies across large log volumes. Learn more

Tabs, Views, and Queries — Manage multiple parallel investigations using tabs. Save views and queries for reuse, and access query history from the query catalog. Learn more

LiveTail — Stream live log data in real time with filtering, highlighting, and pause controls. Now available under Explore Logs. Learn more

The latency widget in the Service Catalog drilldown now supports a Historical mode. Compare a selected percentile (P50, P75, P95, P99, or Avg) across three time offsets — current, 1 day before, and 7 days before — to identify latency trends and regressions. Learn more

AI Session tab in Related Data — When a span represents a GenAI or LLM operation, the new AI Session tab displays the associated chat, highlights the specific span, and surfaces metadata fields, evaluation scores, and tool calls — all within the trace drilldown. Learn more

Time range picker — A new time range picker in the drilldown header controls the query window for all related data. Default times are dynamic based on trace size. Maximum trace time range is 3 days; maximum span display is 20,000 spans per view. Learn more

Small spans indication in Flame view — In traces with many short-duration spans, the Flame view groups consecutive small sibling spans into a single block with a count label. Zoom in to reveal merged spans, or select the block to browse individual spans in a filterable list. Learn more

Logs/traces ratio support in Signals — Cases triggered by Logs/Traces Ratio alerts auto-display the matching logs in Signals so you do not have to copy the query into Explore manually. Learn more

Related cases — Status and Priority filters — Filter the Related cases panel by Status and Priority directly inside a Case to narrow the view without leaving the Case context. Learn more

Strands Agents integration — Monitor applications built with the Strands Agents SDK. The integration enriches the SDK's built-in OpenTelemetry traces with GenAI semantic convention attributes, covering prompt content, completions, tool calls, and user identity. Learn more

Analyze compare flame graph with Olly mini — Use AI-powered analysis in Compare mode to understand performance differences between two profiles without manually inspecting every function. Learn more

Color by frame classification — Color flame graph nodes by classification (User Code, Std Lib, External Lib, GC, Native, Kernel) to see at a glance where CPU time is spent across different code layers. Learn more

Guided onboarding tour — A guided tour now introduces key profiling capabilities when you first visit the Profiles tab. Learn more

Metric Explorer — Query any Prometheus-compatible metric, visualize results as time series charts, and drill down by label dimensions from a dedicated workspace—without setting up a dashboard first. Use the no-code Builder or write PromQL directly, combine expressions, and identify which label values drive anomalies. Learn more

Browse Metric Labels and Values — The original Metric Explorer has been renamed to Browse Metric Labels and Values. Browse metrics, labels, and label values without writing PromQL, and generate a starting query to use in Metric Explorer or Custom Dashboards. Learn more

New top-level Metrics section — Metrics documentation previously scattered across Account Management, Data Transformation, and Monitoring is now consolidated into a dedicated Metrics section in the navigation for easier discovery.

Metric Usage Analyzer subtopics — Variations, Labels, and Explore Tab are now standalone pages nested under Metric Usage Analysis, making each topic easier to find and navigate.

Explore Tab — Identify which label values contribute most to a metric's cardinality. Includes documentation for the 1-hour time window constraint, advantage over PromQL series scan limits, and use cases for identifying cardinality by region, cluster, and service. Learn more

Live Error Logs — Surface real-time error logs for failed query executions directly from the Query Pattern drilldown. Learn more

SLO burn rate alerts now support two detection modes:

• Single Mode: monitors the burn rate over the evaluation window you define. Fires when the budget is depleting faster than the sustainable pace.
• Dual Mode: adds a rapid quality signal on top of the slow burn check. Detects sudden collapses in service quality evaluated over a fixed 10-minute window.

No action required — existing alerts continue to work as configured. Learn more

AI Guardrails — Intercept and block harmful, non-compliant, or low-quality AI outputs in real time, before they reach users. Apply prebuilt policies for prompt injection, PII detection, and toxicity — or define custom policies using natural language. Every guardrail invocation creates an AI span for full unified observability in AI Center. Learn more

AI Center restructure — AI Observability is now AI Center, a complete platform for observing, guarding, and evaluating AI applications. The new structure covers Monitoring, Guardrails, Evaluations, AI SPM, and Code Agents Intelligence under a unified navigation. Learn more

Codex CLI integration — Connect Codex CLI to Coralogix to stream API requests, tool calls, and session traces using built-in OpenTelemetry support. Learn more

Gemini CLI integration — Connect Gemini CLI to Coralogix to stream token usage, tool calls, API requests, model routing decisions, and session traces using built-in OpenTelemetry support. Learn more

Quota-based routing for logs — Configure log policies in the TCO Optimizer that automatically downgrade or block specific log subsets as your daily quota is consumed. Set a usage threshold and define a priority transition (for example, High → Block) so lower-value traffic is deprioritized before hitting your hard cap, helping preserve quota for critical log sources. Learn more

Olly is now a supported entity type in Quota Rules. Allocate units to Olly independently, set overflow behavior, and monitor enforcement from Data Flow, then Quota Rules. Learn more

Olly usage is now visible in the Data Usage page under a dedicated Olly tab. Monitor daily CU consumption, view per-user breakdowns, and track usage trends over time from Settings, then Data Usage. Learn more

AI Guardrails in Data Usage — Data Usage now tracks guardrail policy checks alongside AI evaluator usage. The AI Tokens tab shows guardrail and evaluator costs separately, with policy names indicating type (for example, Prompt Injection (Guardrail) vs. Toxicity (Eval)). Pricing follows the same unit formula as evaluators. Learn more

Updated Access Policies UI — Set general access, define target group rules, and manage policy-level permissions directly from the resource settings panel. Team and Send-Your-Data API keys now include the updated access policy experience. Learn more

Multi-SAML for SSO — Configure more than one SAML identity provider for the same Coralogix scope. Each configuration represents one SSO option users can select during sign-in, supporting parallel IdPs, phased migrations, and diverse user groups. Learn more Guardrails in Data Usage — The Data Usage page now includes a Guardrails tile, giving you visibility into guardrail consumption alongside other entity types. Monitor usage from Settings > Data Usage. Learn more

Code Agents Intelligence — Monitor AI coding agent activity across your organization directly in Coralogix. Track token usage, costs, code impact, and user behavior for Claude Code, Gemini CLI, and Codex CLI from a single dashboard. Learn more

Configure Time Interval for time-axis widgets — New guide explaining how interval settings work, including Auto and Manual modes, Max data points, Min interval, and the effective interval applied by the system. Learn more

Multi-query support for bar charts — Combine multiple queries in a single vertical or horizontal bar chart to compare results side by side across shared categories such as service, city, or severity. Learn more

Filters and Variables now persist in shared dashboard URLs — Save behavior for shared links updated to include active filters and variable state. Learn more

Filter URL syntax for Custom Actions — Pass filter selections between dashboards using the f-<filter-name>=<value> parameter format, including support for multiple values, exclusions, and combined variable and filter parameters in a single URL. Learn more

Analyze errors with Olly Mini — Use Olly Mini in RUM Error Tracking to quickly understand the cause of an error and get structured debugging guidance without leaving the Error Tracking view. Learn more

Session Replay for Flutter — Enable Session Replay in your Flutter app to capture periodic screenshots and interaction triggers during a session. Use it to investigate crashes, ANRs, and unexpected UI behavior with full visual context. Learn more

Navigate from RED Metrics to Span Drilldown — Select any data point in a RED Metrics graph in Explore Tracing to open the Span Drilldown with Group By context preserved. Aggregation type determines which span is auto-focused in the drilldown. Learn more

Investigate with the Trace Drilldown — New dedicated documentation covers the Trace Drilldown and its three main areas: trace view, Info Panel, and Related Data. Move from a selected span to correlated logs, infrastructure context, and profiling without leaving Explore Tracing. Learn more

Span Fields and Attributes — The Info Panel displays fields, tags, and metadata for the selected span or trace, including a span duration distribution heatmap to compare performance against similar spans. Learn more

Headers and Quick Actions — Use header menus to pivot to correlated logs, APM service context, or profiles, and refine your active query directly from the Trace Drilldown. Learn more

Visualize Spans and Traces — View the selected trace as a Gantt Chart, Flame Graph, or Service Dependency View to understand execution structure, timing, and service interactions. Learn more

View Related Data — Surface correlated telemetry for the selected span or trace, including logs, infrastructure context, profiling data, events, and AI insights. Learn more

Explore Tracing — New documentation for the Explore Tracing workspace, covering how to query, filter, and investigate traces and spans across distributed services. Learn more

Real User Monitoring (RUM) tools for MCP Server. Query and analyze frontend and mobile application performance directly from your IDE — find top errors, track user interactions, monitor Web Vitals, and get SDK setup guidance without leaving your coding environment. Learn more

Redesigned counter cards on the Data Usage page give you clearer, scope-aware context for each tab. The Quota units and User data sent tabs show Daily quota, Current usage, Blocked days, Blocked units, Max/Min/Avg daily usage, and PAYG usage total. Other tabs show Total, Max, Min, and Avg daily usage. Max, Min, and Avg cards include a trend badge that compares the second half of the selected period to the first half, so you can spot rising or declining usage at a glance. Learn more

Quick start guide — Get started with Cases by creating your first Case, configuring Case settings, and verifying Notification Center delivery. Learn more

Case routing in Notification Center — Route Case notifications using Notification Center. Define routing rules that trigger on Case lifecycle events, use Ownership Tags for routing, and configure Case-specific conditions and destinations. Learn more

TCO Optimizer now supports DPXL expressions — Write TCO policies using DataPrime Expression Language (DPXL) to match on any log or trace field, including metadata, labels, and user data fields. The Builder remains available for common use cases and generates DPXL automatically. Priority levels are now named High (Frequent Search), Medium (Monitoring), and Low (Compliance) to reflect their storage model and use case. Learn more

Explore the trace drilldown — New dedicated documentation covers the trace drilldown and its three main areas: trace view, Info Panel, and Related Data. Quickly move from a selected span to correlated logs, infrastructure context, and profiling without leaving the page. Learn more

New documentation for trace and span headers — Learn how to use header menus to pivot to correlated logs, APM service context, or profiles, and to refine your active query directly from the drilldown. Learn more

Compare infrastructure configuration changes — Track and compare configuration changes across your infrastructure resources over time. View YAML and JSON diffs to understand how deployments, pods, and other resources have evolved. Learn more

Manage columns — Customize which columns appear in the Infrastructure Explorer table. Toggle column visibility, drag and drop to reorder, and select up to 20 columns at a time. Learn more

Cases as a notification entity type — Notification Center now supports Cases alongside Alerts as an entity type. Create routing rules that trigger on Case lifecycle events, use Ownership Tags for Case routing, and define Case-specific conditions and destinations. Learn more

Condition templating for routing rules — Write advanced routing rule conditions using Tera templates. Includes support for alert name matching, label checks, regex patterns, case status and severity conditions, and entity-type routing. Learn more

ServiceNow destination type — ServiceNow is now available as a Notification Center destination, enabling incident creation and management directly from Coralogix notifications. Learn more

JSM (Jira Service Management) configuration via HTTPS — Configure Jira Service Management as a notification destination alongside OpsGenie. Includes JSM connector setup, Atlassian API endpoints, message presets, and a migration guide reflecting OpsGenie deprecation. Learn more

notification.deliveries dataset update — The notification.deliveries dataset is now enabled by default at no cost. Alerts record delivery failures only, while Cases record both successful and failed deliveries.

Dynamic time selector for Data Usage, improving the analysis of ingestion trends. Learn more

Config Navigator and Config Navigator Quick Start for Fleet Management. Learn more

Updated Fleet Remote Config for Kubernetes and Configuration Management. Learn more

Ownership: support for deployment.environment.name as the Environment ownership tag. Learn more

New admin tools for managing your Olly organization: Usage Management, Organization Management, and Members Management. Learn more

New FAQ pages covering general questions, data sources, features, and admin tools. Learn more

New GitHub docs: GitHub Integration and GitHub Data Sources. Learn more

Updated Data Sources doc — explains how Olly selects data sources. Learn more

Host Observability. Learn more

Streaming enhancements and rule-filtering in the Pipeline Analyzer for clearer pipeline visibility. Learn more

New RUM Mobile Performance page with key mobile application performance and user experience metrics. Learn more

RUM CLI enhancement introducing release managment flags for source maps, including --override and --merge. Learn more

Cases (beta release). Learn more

Metric-based query in alert configuration. Learn more

Bulk actions for alerts. Learn more

New validations for both SLO types in SLO query validation. Learn more

New Highlights feature in View and Manage SLO. Learn more

Service catalog resources — APM resources now mirrors Infrastructure Explorer. Learn more

Streaming enhancements and rule-filtering in the Pipeline Analyzer for clearer pipeline visibility. Learn more

Manage Dashboard Version History for Custom Dashboards. Learn more

Geomap Widget for Custom Dashboards. Learn more

Multi-Query for Custom Dashboards. Learn more

Display name property for Dynamic Widget. Learn more

New Trace Exporter SDK feature for Real User Monitoring. Learn more

Session Replay is now available for React Native. Learn more

Two-Factor Authentication. Learn more

Query Drill-Down for Metric Data. Learn more

Usage Overview for TCO Optimizer. Learn more

LangChain Integration for AI Observability. Learn more

OAuth 2.1 for AI Integrations. Learn more

Log2Metric Alerts. Learn more

No Data Handling for Alerts. Learn more

Explain Flame Graph for Continuous Profiling. Learn more

Suggested Visualizations and Highlights for Visual Explorer. Learn more

OAuth Support for MCP Server. Learn more

User Rules, Fast and Focus Modes, and OAuth Support for Olly. Learn more

OBI support for TLS/SSL (HTTPS) instrumentation for Java and Node.js. Learn more

Share Dashboard URLs for Custom Dashboards. Learn more

Export Widget Data to CSV for Custom Dashboards. Learn more

Dynamic Widget for Custom Dashboards. Learn more

Build Dynamic Tables for Custom Dashboards. Learn more

Permissions List. Learn more

Manage Team Members. Learn more

Metric append checksum for labels in Metrics Fair Usage. Learn more

Labels tab for Metrics Usage Analyzer. Learn more

Create Alerts for Log-Based Datasets. Learn more

Access Control for Datasets. Learn more

Save Results as Datasets for Background Queries. Learn more

Compare Mode for Highlights. Learn more

Use-cases for Relational Queries. Learn more

Fleet Management. Learn more

Infrastructure Explorer Ownership. Learn more

Monitor Resource Stability with Health Policies. Learn more

Group by functionality for Explore Infrastructure Resources. Learn more

Notification Center. Learn more

Supported protocols for eBPF Auto Instrumentation with OBI. Learn more

Heatmap for Custom Dashboards. Learn more

Policy-Based Access Control, supporting API Keys and Custom Dashboards. Learn more

Compare mode — compare raw and parsed logs side by side directly inside Pipeline Analyzer. Learn more

Mobile Vitals for Real User Monitoring (RUM). Learn more

Fair Usage Limits and Query Usage Analyzer for metrics. Learn more

365-day time window and group by functionality added to Data Usage. Learn more

Drill-Down View for Alerts. Learn more

LiteLLM and Gemini SDKs for AI Observability. Learn more

Log policies for TCO Optimizer. Learn more

Variations tab for Metrics Usage Analyzer. Learn more

Compact Span Metric for Application Performance Monitoring (APM). Learn more

Variables for Custom Dasbhoards. Learn more

Annotations for Custom Dashboards. Learn more

Compare mode for Pipeline Analyzer. Learn more

IP Access Service for OpenAPI. Learn more

Olly Autonomous AI Agent October 2025 release notes. Learn more

AWS ECS-EC2 OpenTelemetry Integration. Learn more

APM Service Health View — Introducing traffic-light views for services: green, yellow, red, based on active alerts. Learn more

Schema Manager — See if fields are fully mapped, unmapped, or partially mapped, right inside Schema Manager. Learn more

Infrastructure Explorer: Live view of your cloud + K8s — See all your AWS and Kubernetes entities in one place. Learn more

End-to-end Kubernetes observability made simple — Our new OpenTelemetry eBPF Integration delivers logs, metrics, and traces in a single setup, bringing kernel-level visibility to entire Kubernetes environment. Learn more

See if fields are fully mapped, unmapped, or partially mapped, right inside Schema Manager. Learn more

Expanded Unified Threat Intelligence — Broadened threat intel engine with support for JA3/JA4 TLS fingerprints, malicious domains, URLs, file hashes, and prebuilt alerts, all delivered via the Snowbit Utilities extension. Learn more

Manage SLOs as code — Define and manage SLOs via Terraform or API. Automate and version your reliability goals across environments. Learn more

Transactions Processor: Simpler, Smarter, for every Language — Now in the OpenTelemetry Collector Contrib, the Coralogix Transactions Processor provides full transaction breakdowns for every OTEL-instrumented language, pinpointing the operations behind errors and slowdowns. Learn more

Control High-Cardinality Metrics — Cap Span-Metrics per service and redirect overflow to a fallback series to protect performance and control costs. Learn more

Smarter AI Integrations with MCP Server — MCP Server brings natural language querying to your observability data outside Coralogix. Integrate with agents like Claude or Cursor to build intelligent, context-aware assistants powered by Coralogix data. Learn more

RUM Versions: Track every Deployment, Catch every Regression — Get real-time performance and error insights by version. Compare adoption, web vitals, and metrics to spot regressions before they affect users. Learn more

Real-Time SLO Tracking & Alerts — The new SLO Center (now in open Beta) lets you define Service Level Objectives, monitor their error budgets in real time, and get alerted before reliability issues impact your users. Learn more

See inside your data with Pipeline Analyzer — Pipeline Analyzer gives you real-time visibility into your log pipeline. Instantly inspect logs as they're ingested, view parsing rules in execution order, and capture live log streams. Learn more

Take control with Quota Rules — Quota Rules let you set precise usage limits across your telemetry pipeline. Enforce automated blocks, control costs, prevent noisy data spikes. Learn more

OpenAPI for CX management and Swagger docs now available — Our new OpenAPI support means fully standardized, discoverable API endpoints, so you can build faster with better documentation. Learn more

Operator for streamlined resource management — Our new Coralogix Operator gives you a Kubernetes-native way to manage your observability resources. Define configurations as code, enable GitOps workflows. Learn more

See inside your data with Pipeline Analyzer — get real-time visibility into your log pipeline. Instantly inspect logs as they are ingested, view parsing rules in execution order, and capture live log streams. Learn more

Take control with Quota Rules — set precise usage limits across your telemetry pipeline. Enforce automated blocks, control costs, and prevent noisy data spikes. Learn more

eBPF powered APM with zero instrumentation — Get deep application performance insights without touching your code. The eBPF-based APM support enables automatic tracing and analysis at the kernel level, no SDKs, no code changes, just instant visibility. Learn more

Create and manage custom actions — Custom actions let you turn insights into action, right from your dashboards. Build internal or external links based on widget data. Learn more

Faster insights with Metrics Explorer — Explore metrics instantly with our upgraded Metrics Explorer. Query and visualize your time series data in real time, without writing complex queries. Learn more

One home for all your frontend RUM measurements — Centralize and simplify your frontend metrics with the new Measurements feature. From page loads to custom events, track everything in one place for better analysis and faster optimization. Learn more

Cleaner UX for Data Usage — Track your data consumption more easily with updates to the user experience that enforce transparency and help customers make informed decisions about their quota usage. Learn more

Spot costly dependencies fast — APM Dependencies reveal how your services interact with databases, APIs, and external systems so you can quickly fix what matters most. Learn more

Start with Span Metrics for faster, cheaper APM — Now the default for new APM users, Span Metrics reduces data volume and ingest costs while delivering complete APM coverage. Learn more

Introducing continuous profiling — Built on eBPF and powered by OpenTelemetry, Continuous Profiling captures high-frequency stack traces, CPU cycles, memory allocations, and more—without interfering with your application. Learn more

Dozens of new visualizations for data usage — Track exactly how your data is used — including AI evaluators — filter and sort with ease, and export detailed reports. Learn more

Pinpoint infrastructure issues instantly — Quickly connect log data with underlying infrastructure behavior to find root causes faster. Now available for the OTEL K8s Shipper, with broader support coming soon. Learn more

Private link support for every AWS region — Coralogix now supports cross-region AWS PrivateLink, so you can send data privately from any AWS region. Learn more

Coralogix AI Center — Launch of native AI observability solution directly within Coralogix. The new AI Center is the first observability solution built to treat AI as its own stack. Learn more

Protect data cleanliness — Predefine field types, maintain structured data, and eliminate ingestion order dependencies for more accurate and efficient monitoring. Learn more

Identify latency issues in seconds — Understand how different users, IP addresses, pages, domains, protocols, operating systems, language versions, and more impact performance in your system. Learn more

Jump from an error log to a span in one keystroke — Press the space bar on any log to instantly uncover a full breakdown, including related logs and correlated traces. Learn more

Laser focus on the digital experience of any user — See exactly which users are struggling with errors, slow performance, or crashes—and take action. Learn more

Predefine field types, maintain structured data, and eliminate ingestion order dependencies for more accurate and efficient monitoring. Learn more

Enhance Audits & Simplify Account Management — Upgrade to Auditor V2 for real-time tracking, standardized event structures, and improved compliance monitoring. Learn more

Ask Any Question, About Any Feature, Anytime — Get instant, documentation-based answers with Cora's Knowledge Assistance. Use natural language to ask questions and receive real-time responses. Learn more

Cora AI in CX Academy — A brand-new section in Academy all about Cora AI. Learn more

Unify and Control All Outbound Notifications — Manage all outbound notifications from a single interface with the new Notification Center. Send alerts to multiple destinations like Slack and PagerDuty, customize message formats, and define smart routing rules. Learn more

Monitor Key Frontend Actions with Precision — Track user interactions, measure complex operations, and monitor third-party performance with custom spans. Define spans at critical points in your application for deeper visibility, faster troubleshooting, and a better user experience. Learn more

Automatically Trace Errors to the Right Micro Frontend — Gain full visibility into your micro frontend architecture by automatically tracking and labeling errors at the source. Aggregate logs, capture full stack traces, and pinpoint error propagation with ease. Learn more

Dynamically drop irrelevant metrics — Drop irrelevant metrics, even after ingestion, to reduce costs and streamline data management. Our Metrics Blocker feature is now accessible via API. Learn more

AI-powered log investigations — Coralogix now transforms complex logs, from any application, subsystem or severity, into simple explanations, surfacing what happened, the impact and the significance of an event. Learn more

Seamless APM with eBPF now in beta — eBPF drives simple, unintrusive, low risk instrumentation for services to provide an effortless overview of application health and performance. Learn more

APM version benchmarking — Service Metrics by Version offers precise insights into your service performance across different versions, over time. Learn more

Coralogix Lambda Layers reach v1.0.0 — The suite of Coralogix Lambda Layers have reached v1.0.0, marking a milestone in our serverless telemetry. Learn more

Streamlined investigation flows for faster MTTR — Leverage a new, expandable side panel for seamless workflows, one-click evidence collection, and flexible viewing options – all designed to minimize context switching and shorten MTTR. Learn more

Get to root causes faster for better user experiences — Uncover patterns and outliers with RUM Highlighting to quickly identify the root causes of performance issues. Learn more

Explore Data Your Way with Visual Explorer — Instantly visualize your queries without creating dashboards with Visual Explorer's easy to use interface. Correlate logs, spans, and metrics side-by-side. Learn more

Bridge front-end and back-end gaps — Pinpoint the root cause of performance issues with RUM Network Monitoring. Track network requests, error rates, response times, and sizes to distinguish between front-end bugs and backend API issues. Learn more

Capture user screens on every error — See exactly how your site renders in real-time with DOM Indications, pinpointing slow-rendering components and bottlenecks. Coupled with UI Screenshots, capture the full context of errors and their impact on user experience, all with built-in privacy controls and session tracking for seamless troubleshooting. Learn more

Simplify query building in Custom Dashboards — Query faster and more intuitively with the Query Builder, now available in custom dashboards for logs, metrics, and spans. Learn more

Flexible, unified views in Custom Dashboards — Gain a comprehensive, polystat view of your system with our new Multi-Gauge. Also, set individual time frames for widgets with the widget time picker. Learn more

Unlock deeper insights from complex datasets — Analyze data containing arrays with precision using the new explode operator in DataPrime. Learn more

New integrations for enhanced security and monitoring — RDS Enhanced Monitoring for AWS CloudWatch to optimize resource performance. Learn more

Expand your Real User Monitoring capabilities with new SDKs — Track user experiences across more platforms with new SDKs for Android and tvOS, helping you capture and optimize performance across all your applications. Learn more

New integrations for enhanced security and monitoring — Stream CrowdStrike Falcon events and Microsoft 365 audit logs into Coralogix for centralized analysis and faster threat detection. Learn more

Control user data access with Scopes — Gain granular control over user access to logs and traces with Scopes. Ensure users only access the logs and traces relevant to them. Learn more

Unlock deeper insights in your Service Catalog — Compare real-time data with historical metrics using Comparison Mode to quickly identify trends and streamline troubleshooting. Plus, check out the new Incidents Column and get an at-a-glance view of system-wide issues and their status. Learn more

Streamline your incident response with Investigations — Streamline your incident response with Investigations for centralized evidence collection, clear event timelines, and seamless team collaboration. Learn more

Integrate Coralogix with your data pipelines with Forwarders — Seamlessly send parsed and enriched log data from Coralogix to an external kafka cluster with Forwarders. Learn more

A new way to visualize your traces with the Service View — Easily visualize large and complex traces with the Service View. Simplify debugging, rapidly identify issues, and visualize how your services interact. Learn more

Seamlessly send parsed and enriched log data from Coralogix to an external Kafka cluster with Forwarders. Learn more

Reduce costs with Metrics Optimizer — Identify which unneeded metrics are burning through your data quota and safely block them without complex configurations. Learn more

Simplify monitoring & alerting with APM Service Alerts — Optimize your service alerts management with APM Service Alerts. Create alerts directly from your APM service overview widgets and easily view incidents directly connected to your services. Learn more

Empower your team with Scheduled Reporting — Deliver the power of Coralogix directly to any inbox with scheduled reports to visualize your logs, metrics, and tracing data. Learn more

Effortlessly form precise DataPrime queries with the DataPrime Query Assistant — Transform natural language into precise DataPrime queries effortlessly. Learn more

Leverage the power of DataPrime for traces — Harness the full power of DataPrime on our Explore Tracing page to effortlessly filter, extract, aggregate, and transform data. Learn more

Enhance Alert Management with Phantom Mode — Enhance alert management capabilities and focus on the most relevant incidents with Phantom Mode. Use alerts as building blocks for your Flow alerts without triggering separate notifications. Learn more

Effortlessly generate accurate metrics with Span Metrics — Automatically transform and aggregate trace data into metrics using the OpenTelemetry Span Metrics Connector. Learn more

Optimize Mobile App Performance with Mobile RUM — Quickly identify and resolve errors across diverse devices and network conditions with our new Mobile Real User Monitoring (RUM) for iOS. Monitor real-time performance, analyze error patterns, and ensure a seamless user experience. Learn more

Improve efficiency with RUM Saved Views — Easily save and reuse filters and queries in the Real User Monitoring (RUM) dashboard to streamline your workflow. Learn more

Manage access with customizable API Keys — Enhance security and assign precise permissions with customizable API Keys. Choose between Personal Keys, Send-Your-Data API Keys, and Team Keys. Learn more

Control user data access with Scopes — Gain granular control over user access to logs and traces with our new Scopes. Ensure users only access the logs and traces relevant to them. Learn more

Unlock the full potential of Anomaly Detection Alerts — Maximize the potential of our AI-Powered Alerts with 6x more prediction models per day by default and customizable limits per alert type. Learn more

Streamline data management with DPXL — Streamline and manage your data more effectively with DataPrime Expression Language (DPXL). Create rich, expression-based filters with versioning for stability. Learn more

Safeguard your environment with WAF & CDN monitoring — Protect your environment with the fastest and most accurate alerting available for WAF and CDN data. Identify and prevent real threats with our multidimensional bad actor scoring. Learn more

Comprehensive metrics usage insights — Uncover your most resource-intensive metrics with Metrics Usage to visualize your data trends. Learn more

Streamlined database troubleshooting — Rapidly identify and resolve database-related issues with Database Monitoring. Get detailed insights into your databases and the services they interact with. Learn more

Enhanced user experience monitoring — Round out your real user monitoring with our new Session Replay. See exactly what your users are experiencing so you can effectively identify performance issues and resolve errors. Learn more

New custom dashboard views + easier sharing — Visualize the cumulative contribution of various data points over time with stacked line charts, then use our new Permalink feature to share a snapshot of a dashboard. Learn more

Custom log enrichment is now even more intuitive — Enrich logs from specific columns in your CSV file, download enriched files, and use them as data sources in DataPrime queries. Learn more

Log normalization for simplified data analysis — Leverage new log normalization feature to standardize keys for commonly occurring values across various security log types. Learn more

Custom log enrichment is now even more intuitive — enrich logs from specific columns in your CSV file, download enriched files, and use them as data sources in DataPrime queries. Learn more

Log normalization — standardize keys for commonly occurring values across various security log types. Learn more

Enhanced RUM privacy with Data Masking — Gain greater control over your data and prevent sensitive data from being recorded with Data Masking for Real User Monitoring. Learn more

RUM data labeling and URL aggregation — Aggregate related event pages for clearer issue identification with URL Blueprinting. Tag events by custom attributes with our Label Provider to easily filter through events. Learn more

APM Service Flows: Rapid and Accurate Troubleshooting — Identify real performance issues with our new Service Flows' aggregated view of service requests over time. Drill down into their underlying operations and calls to view critical bottlenecks. Learn more

Dynamic Query Visualization with DataPrime Widget — Bridge the gap between your data and actionable insight with our DataPrime Widget—now with auto-generated visualizations and modification suggestions. Learn more

Effortlessly Organize Saved Views — With our improved user interface, you can effortlessly save your views, determine privacy settings, and organize your saved views with Folders. Learn more

Get Immediate Context with Dashboard Annotations — Add Annotations to your Custom Dashboards to spotlight and give context to crucial events. You can also now create folders using drag and drop to better organize your dashboards. Learn more

Navigate from Logs to APM Overview — Smoothly transition from reviewing your logs to exploring key metrics in the related APM service overview. Learn more

Core Web Vitals: Drill Down to Individual URLs — Coralogix RUM now provides a drill down into your Core Web Vitals metrics at the URL level. Learn more

Take Control with Our New Role Based Access — With Coralogix's new RBAC, you can easily control user access. Create a brand new user role by choosing from over 300 different permissions, or select one of seven predefined system roles. Learn more

Suppress Your Alerts When Needed — Use our new Alert Suppression Rules to mute alerts you don't need during scheduled maintenance, testing, auto-scaling events or outside working hours. Learn more

Easily Import and Export Custom Dashboard — Effortlessly share your custom dashboards across teams within your organization by importing and exporting them. Learn more

View Metrics And What They Monitor — Adding metrics to your Custom Dashboard? You can now use free text to search for a metric of your choice and see what that metric monitors. Learn more

More RUM Anyone? Core Web Vitals Now Available To Optimize User Experience — In addition to our updated RUM Browser SDK and error tracking alerts, we've added Core Web Vitals, so you can easily keep an eye on your web performance and overall user experience. Learn more

GenAI Query Assistant — An AI-powered search feature that lets you use natural language for querying data. It translates your request into Coralogix's DataPrime query language. Learn more

Incidents Screen — Gain more insights into your triggered alerts with our improved Incidents feature. Group by tags by region, environment, and more. Learn more

Metric Alert - Anomaly Detection — Our AI-leveraged alerts give you full visibility of what is happening in your services, setting the most accurate threshold for your data. Learn more

Apdex Score — Check out our latest widget added to our Service Catalog, the Apdex Score, or Application Performance Index. Learn more

OpenTelemetry Lambda Auto Instrumentation — Coralogix now supports the latest version of OpenTelemetry Lambda auto instrumentation wrappers, together with our AWS Lambda Telemetry Exporter. Learn more

RUM User Sessions — Track every step of your users' interaction with your website or application. Analyze and correlate real-time data for rapid response to critical issues. Learn more

GCP Traces — Expand your APM coverage by sending your Google Cloud traces seamlessly to Coralogix, being able to search, analyze and visualize your applications' performance and health. Learn more

AWS Kinesis Data Firehose Metrics — Monitor all your AWS services with real-time streaming data delivered from AWS Kinesis Data Firehose directly to Coralogix. Learn more

Azure Resource Manager (ARM) Integration — Added more to ARM integration to create custom Coralogix templates to send events from Event Hub, Blob storage, Queue storage and Diagnostic storage. Learn more

Error Template View — Simplify error management with advanced templating of similar errors into definable issues. Effectively reduce unnecessary noise with drill-down based on customizable filters such as error type, username, URL, session ID, data source and more. Learn more

New Quota Manager — For extensive org-level data management, the Quota Manager now presents data consumption as both Coralogix Units and GB sent, with group by options. Learn more

Dashboard Improvements — Exciting dashboard updates include interlinked filters, stacked bar charts, and a new colour scheme for graphs. Plus, enjoy design flexibility with the new Markdown Widget and query archived data within custom dashboards. Learn more

Extensions Improvements — New integration flows for GCP Spans, Azure ARM, Azure Metrics, and Slack. Preview flow alerts in Coralogix extensions. Learn more

RUM Onboarding — Enable Real User Monitoring quickly with the RUM Integration Package. It automates RUM Browser SDK setup and source map uploads, capturing and sending network requests and errors to Coralogix once configured. Learn more

Robust CSPM — Improved CSPM (Cloud Security Posture Management) offering by extending GCP support, offering enhanced clarity and guidance on issue resolution across AWS and GCP in around 600 scenarios. View Documentation >. Learn more

Dashboard Improvements — Custom dashboards now support a longer time range (90 days). Line chart widgets can now create alerts. Money added as a new unit set. Enhanced multi-query editing with hide, rename and duplicate options. Learn more

DataPrime Log Enrichment — Use Coralogix's DataPrime query language to enrich and filter your logs using additional context from a lookup table. Learn more

Kubernetes Collector — Leverage the new 'Kubernetes Collector' extension in Coralogix Apps. Collect the exact data (metrics and K8s events) needed and install via OpenTelemetry, without manually installing each component. Learn more

Unified Threat Intelligence — Coralogix's 'Unified Threat Intelligence' relies on Streama technology to provide seamless integration with leading threat intelligence feeds. Automatically enrich log data with malicious indicators in real time. Learn more

More Than Usual Alerts — You can now set the 'More Than Usual' condition for metric alerts, to detect anomalies in the values of any metric received (including E2M). Learn more

Multiple Queries within a Single Widget — Custom dashboards now support multiple queries, allowing you to compare logs, metrics and spans on the same line chart. Learn more

Bar Chart Additions — Bar charts in custom dashboards now have the option to group charts either by time buckets or multiple group-by values. Learn more

Dashboard Improvements — Multiple group-by fields for Spans in pie/bar/line charts, tooltip tab improvements, pie chart display threshold, follow-up actions in Line Chart legends, multiple y-axes enhancements. Learn more

Recording Rules — See/update existing recording rules and create new ones using the new UI for Recording Rules. Learn more

Tracing Visualization — Added 'max, min and avg' aggregate display for tracing graphs, shareable URL for dependency graph, Services tab showing execution time, recenter option. Learn more

Traces Flame View — A new 'Flame View' added to the existing Traces Dependency view and Gantt view. Learn more

Coralogix Apps — The integrations on 'Coralogix Apps' have been extended to include CloudTrail, S3 Log Collection, CloudWatch and VPC Flow Logs from AWS. Also, Okta can be integrated in a much easier way. Learn more

Traces TCO Optimizer — Prioritize important traces and reduce up to two-thirds of your tracing costs. Assign high, medium and low priority levels. Learn more

Data Usage Metrics — Admins can now enable the collection of data usage metrics as native Prometheus metrics for granular details on data consumption. Learn more

Dashboard Improvements — Pie charts and bar charts added as new widget types. Upgraded data tables with 'values over time' graph. All 5 widget types now support all 3 data types. Learn more

Metric Recording Rules — New UI for Recording Rules now much easier to create new recorded metrics. Import a YAML file or create a rule group. Learn more

Explore Screen Improvements — Group-by option added to logs archive histogram; traces dependency graph now supports a few 1,000s of spans; 'Manage Keys' pop-up added to columns. Learn more

Permutations Graph — Events2Metrics now includes a graph that displays the amount of permutations actually used and permutations left. Learn more

Service Catalog Filters — The service catalog now includes a filter panel, similar to the logs Explore screen, to filter services based on specific characteristics in the span tags. Learn more

Incoming Webhooks — New simplified process that lets you generate webhook URLs to connect applications and systems with Coralogix. Learn more

Rolling Window — Under standard user-defined alerts, if the alert conditions are set for 'More than', you can now choose a Rolling Window or Dynamic Duration evaluation window. View Documentation >. Learn more

Flow Alert Group-by — The flow of alerts can now be grouped by the common group-by keys used in the defined alerts. View Documentation >. Learn more

Service Catalog — A new feature added under Coralogix's APM offering. It includes a list of all the services in your system with details such as service type, number of requests, error rate, and P95 latency. View Documentation >. Learn more

Dashboard Improvements — Pie Chart added as new visualization widget. 'Metrics' added as a new filter type. 'Save As' button to clone dashboards. 'Show Only Errors' button for span-based widgets. Go to Platform >. Learn more

Extensions Improvements — Prometheus recording rules can be deployed as part of an extension. Security and AWS enrichments can now be deployed. Selective deployment of enrichments now possible. View Documentation >. Learn more

OTEL Metrics — The K8S dashboard in Coralogix now supports OTEL metrics if you are using an OpenTelemetry collector with a Kubernetes orchestration. View Documentation >. Learn more

Data Usage Report — Under the Data Usage section, you can now download a detailed data usage report exported as a CSV file. Go To Platform >. Learn more

Metric Usage Trend — A new 'Metrics Usage Trend' visualization allowing you to visualise 7 days of history for each metric value. View Documentation >. Learn more

Multiple API Keys — Admins can now configure multiple private API keys to send data to their Coralogix teams. Go To Platform >. Learn more

Notification Groups — Alert notifications can now be grouped into multiple 'Notification Groups' for different keys. Add multiple webhooks to split the alert triggers and customize the notification frequency. View Documentation >. Learn more

Spans in Custom Dashboards — Custom Dashboards are now more flexible. Use spans as a new data source, along with logs and metrics. View Documentation >. Learn more

Content Column — A new Content Column added to the 'Explore' screen grid to improve visibility for content fields, extracting meaningful textual content from logs. View Documentation >. Learn more

Extensions — Managing your extensions is now easier as you will be notified about updates through a notification bar. An 'Update' button is added for updating already deployed extensions. Go To Platform >. Learn more

Set multiple retention periods with Archive Tags — control the length of archive retention for different groups of logs. Define different lifecycle policies in the Setup Archive page. Learn more

New! Custom Dashboards — Create unlimited, personalized custom dashboards. Use three new visualizations – Data Table, Line Chart, and Gauge – to define and create a dashboard catered to your specific observability needs. View Documentation >. Learn more

Set Multiple Retention Periods with Archive Tags — Control the length of archive retention for different groups of logs. Define different lifecycle policies in the Setup Archive page. View Documentation >. Learn more

DataPrime Available on Frequent Search — DataPrime is now available across fully indexed, frequent search logs AND data that sits in your own archive. Go to Platform >. Learn more

Logs2Metrics is now Events2Metrics! — You can now generate metrics from spans in addition to log data! View Documentation >. Learn more

Content Column — New column in 'Explore' screen grid automatically extracts the key with the meaningful textual content in the log.

Create New Teams in Org Admin Screen — Organization admins can now create new teams from the 'My Teams' tab in the Settings page.

Incident Management in Insights Screen — You can now acknowledge, assign, and resolve alerts directly from the Insights UI.

Alerts Map — Visualize logical groupings of your alerts and their statuses for a powerful 'at a glance' view of what's going on in your systems. View Documentation >. Learn more

APM for Amazon EC2 — Using Amazon Kinesis Data Firehose, you can now send Amazon EC2 metrics to Coralogix and view them on your Coralogix dashboard correlated with relevant traces and spans. View Documentation >. Learn more

Lucene Syntax Highlighting — Lucene syntax highlighting makes it easier to read and write queries. Available everywhere in the platform where you can write Lucene queries.

UI/UX Improvements — Default 'flat' mode for cleaner 1-line, 2-line, and condensed presentation modes. New 'List' presentation mode. Object columns can now be filtered to display a subset of fields.

Tracing Updates — Query your tracing data with Lucene syntax in the tracing UI. The dependency view is now the default tracing view with metadata on the right-hand side.

Extended Integration Support: AWS Lambda Metrics — Our Lambda extension now supports the collection of AWS Lambda metrics. CX_Metadata is included alongside incoming documents. View Documentation >. Learn more

Extended Integration Support: JumpCloud SCIM Identity Management — New SAML integration with JumpCloud allows you to manage groups and users from JumpCloud. View Documentation >. Learn more

Extended Integration Support: Prometheus Recording Rules — Prometheus Recording Rules can now be pulled from Coralogix using cURL commands. View Documentation >. Learn more

Application Performance Monitoring (APM) — Coralogix now offers key features of Application Performance Monitoring for modern, cloud-native environments. Get Started >. Learn more

AWS Lambda Telemetry Exporter — Our new Coralogix AWS Lambda Telemetry Exporter is now available in the AWS Serverless Application Repository as an open beta. View Documentation >. Learn more

Telegraf Operator — Use our new integration with Telegraf Operator to simplify metric collection in Kubernetes. View Documentation >. Learn more

AWS Resource Enrichment — New AWS Resource Enrichment allows you to enrich your logs with tags from Amazon Web Services (AWS) EC2 instances. View Documentation >. Learn more

Google Cloud Pub/Sub — Updated integration with Google Cloud Pub/Sub to use a push subscription to send logs to Coralogix. View Documentation >. Learn more

Extensions Improvements — The Coralogix Extensions lobby has been improved with search, label, and status filters. Individual extensions can now be deployed to specific applications and subsystems. View Documentation >. Learn more

OpenTelemetry Support for Logs, Metrics & Traces — You can now use OpenTelemetry to send logs, metrics, and tracing data to Coralogix. Get Started >. Learn more

Dashboard Updates — Logs Graph Grouped by Severity now stacks severity types with breakdown tooltip. Help Tooltips added to dashboard widgets. Top 3 Abnormal Errors now differentiates 'Above Normal' vs 'Newly Introduced'. View Dashboard >. Learn more

22 New Scalar Functions in DataPrime — 22 new Scalar functions added to DataPrime, including new String, IP, UUID, URL, and Number functions.

Archive Query Improvements / DataFusion Query Engine Enhancements — Supporting a conservative 5X increase in query speeds over AWS Athena, with no hard limit to the number of partitions scanned.

Explore Updates — TCO Priority Added as Metadata. Tracking Logical Data Types (IP Addresses, URLs, Emails). Content Type Icons added to Column Headers.

Organization and Admin Console — Coralogix supports multi-tenancy, allowing a single organization to contain multiple teams. The Org Admin can manage quota, settings, users, and more at the organization level.

Tracing Alert — Create Tracing alerts for high latency on specified Tags and Services. Tracing alerts can be grouped by different Tags and specified for a specific threshold of Latency and Spans. Learn More >. Learn more

'Group By' for 'Less Than' Alerts — Enhance your 'Less Than' alerts using the 'Group By' option. Values under the 'Group By' fields are aggregated into a histogram. Learn More >. Learn more

Enhancements to Logs Screen UI — Mapping Exception indicator added. New Row Formats (1-Line, 2-Line, Condensed, JSON) for logs display. Learn More >. Learn more

New Integrations: Zabbix. Learn more

New & Improved Dashboard! — Get an overview of your system health with more in-depth widgets showing a summary of your anomalies, alerts, and more. Open Dashboard >. Learn more

DataPrime Archive Query Syntax — DataPrime is now officially GA! Use DataPrime to parse and query unstructured data fields on the fly, generate synthetic fields, and run calculations from archived data. Learn More >. Learn more

Explore UI Improvements — Log Screen improvements: sort tooltips by order, compact large numbers, resizable legend container. Tracing Screen: crosshair on hover. DataMap Filtering & Actions. Open Dashboard >. Learn more

New Integrations — StatsD Metrics, Cloudflare LogPush, Open Commerce API, Amazon EKS (Fargate) Logs, Telegraf, Amazon EventBridge, Nagios. Learn more

Flow Alert — Define a sequence of alerts in our Drag & Drop Flow Builder UI that combines Logs, Metrics, Tracing, and Security information to create a single alert flow. Learn More >. Learn more

New Integrations — Amazon Kinesis Data Firehose - Metrics, Custom Metrics, Terraform Module for Cloudflare Logpush. Learn more

DataMap Updates — In the Group Editor, new options to sort by attributes, scale threshold values, and limit hexagons per group. New 'Compare to others' functionality. Learn More >. Learn more

New Parsing Rules — Introducing Stringify JSON Field and Parse JSON Field rules to parse escaped JSON values within a field to a valid JSON object and vice versa. Learn More >. Learn more

Archive Query Updates — Timeframes up to 3 days for added accessibility to data in your remote bucket. New Execute Archive Query function allows you to review active filters before running. Learn More >. Learn more

Tracing Updates — New dynamic graphs and saved views in the Tracing UI for SLA dashboards. Three default graphs: Max duration by Action, Count by Service, and Error Count by Service. Aggregation operators for 99, 95, and 50th percentiles. Learn More >. Learn more

New Integrations — Amazon Kinesis Data Firehose - Logs, Terraform Modules for Azure EventHub, AWS Cloudtrail, AWS Cloudwatch, AWS S3 Logs Collection, Google Cloud Pub/Sub, GitHub Version Tags, Coralogix RabbitMQ Agent, Salesforce Cloud Commerce. Learn more

New Parsing Rules — Stringify JSON Field and Parse JSON Field rules to parse escaped JSON values within a field to a valid JSON object and vice versa. Learn more

Session Timeout Management — A new option on the Settings page gives users the ability to choose how much idle time will trigger a force logout. Learn More >. Learn more

Snooze Alerts in Alerts Tab — The option to snooze an alert is now available from within the main Alerts screen for centralized management of alert statuses. Learn More >. Learn more

DataMap — Build custom mappings of your infrastructure, log-based, and business metrics to visualize and monitor your system health. Learn More >. Learn more

CX-DATA Archive Format — A new archive format based on Parquet that improves archive query performance by 5X! Learn More >. Learn more

New Integrations — Terraform Modules for AWS CloudWatch and AWS S3 Logs Collection, Google Cloud Pub/Sub. Learn more