Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
32 changes: 26 additions & 6 deletions src/content/docs/logs/ui-data/use-logs-ui.mdx
Original file line number Diff line number Diff line change
@@ -1,10 +1,10 @@
---
title: Use logs UI
title: "Use logs UI"
tags:
- Logs
- Log management
- UI and data
metaDescription: How to use the New Relic logs UI to explore your data.
metaDescription: "How to use the New Relic logs UI to explore your data."
redirects:
- /docs/explore-your-data-new-relic-logs-ui
- /docs/logs/new-relic-logs/ui-data/explore-your-data-new-relic-logs-ui
Expand All @@ -25,6 +25,7 @@ Use our logs UI to:
* Query your data to create custom visualizations, or add those to dashboards
* Organize your organization's log data, and optimize query performance with data partitions.
* Set up alert conditions for problems you want to prevent.
* [Schedule automated NRQL searches](#workflow-search) to receive regular query results via email.

To stay up to date with new capabilities and improvements, subscribe to our [RSS feed for Logs release notes](/docs/release-notes/logs-release-notes).

Expand Down Expand Up @@ -126,11 +127,29 @@ To explore your logging data, follow this basic workflow.
To switch from the Lucene-syntax search bar to a NRQL query, click the <DNT>**NRQL**</DNT> button beside the search bar. There is no direct equivalence between NRQL and Lucene, and this means that the NRQL query will often be simpler and not as complex, but this gives you a helpful start for building a query with the same data.

For more information on querying your logs, see the [logs query syntax docs](/docs/logs/ui-data/query-syntax-logs/).

**Schedule a search**

<Callout title="preview">
We're still working on this feature, but we'd love for you to try it out!

This feature is currently provided as part of a preview program pursuant to our [pre-release policies](/docs/licenses/license-information/referenced-policies/new-relic-pre-release-policy).
</Callout>

After composing and running a query in the logs UI, you can schedule it to run automatically and receive results via email:

1. From the <DNT>**All logs**</DNT> page, compose and run your query.
2. To schedule the search, use either of these options:
* Click <Icon name="fe-more-horizontal"/> at the top-right corner and select <DNT>**Schedule search**</DNT>.
* Click the clock icon below the query trend chart.
3. Configure your [scheduled NRQL search](/docs/nrql/using-nrql/schedule-nrql-searches) with notification settings, schedule, and output format.

To view and manage all your scheduled searches, go to <DNT>**[one.newrelic.com](https://one.newrelic.com) > Administration > Scheduled searches**</DNT>. Learn more about [managing scheduled searches](/docs/nrql/using-nrql/schedule-nrql-searches/#manage).
</Collapser>

<Collapser
id="query-builder"
title="7. Advanced log analysis with NRDB query builder."
title="6. Advanced log analysis with NRDB query builder."
>
<img
title="Advanced log analysis with NRDB query builder"
Expand All @@ -143,7 +162,7 @@ To explore your logging data, follow this basic workflow.

<Collapser
id="workflow-related"
title="8. Get related logs."
title="7. Get related logs."
>
Focusing on the most useful logs can help you with:

Expand All @@ -156,7 +175,7 @@ To explore your logging data, follow this basic workflow.

<Collapser
id="traces-in-context-overview"
title="9. Dive deep into distributed traces."
title="8. Dive deep into distributed traces."
>
Once you've narrowed down the set of logs with filters and then opened a specific log, you can see related distributed traces. As long as you've set up distributed tracing and there are sampled traces related to logs, you'll see an option to view them. This is a quick way to view trace information without going to the main distributed tracing page.

Expand All @@ -179,10 +198,11 @@ To explore your logging data, follow this basic workflow.

<Collapser
id="share"
title="10. Share your findings."
title="9. Share your findings."
>
Use any of the core New Relic UI functions to [explore your data](/docs/query-your-data/explore-query-data/browse-data/introduction-data-explorer/) (specific account, time range, metrics and events, query builder, etc.) and share the data with charts, add to dashboards, etc. For more information, see the [examples](#examples) in this document.
</Collapser>

</CollapserGroup>

## Export [#export]
Expand Down
150 changes: 150 additions & 0 deletions src/content/docs/nrql/using-nrql/schedule-nrql-searches.mdx
Original file line number Diff line number Diff line change
@@ -0,0 +1,150 @@
---
title: Schedule NRQL searches
tags:
- NRQL
- Scheduled searches
- Query scheduling
- Automated queries
- Email notifications
- Workflow automation
metaDescription: "Schedule automated NRQL queries to receive regular updates on your data via email. Transform repetitive, manual queries into proactive, automated workflows."
freshnessValidatedDate: never
---

As a New Relic user, you may run the same NRQL queries over and over again to monitor critical patterns, check for specific conditions, or generate regular reports. For example, you need to check daily for failed transactions, monitor weekly error rates, or track hourly performance metrics across your applications. This manual process is time-consuming and makes it easy to miss important insights when you're not actively monitoring.

Scheduled NRQL searches solve this problem by automating your repetitive queries. You can schedule queries to run automatically and receive results via email, so you'll stay informed about critical patterns without constant manual monitoring.

<Callout title="preview">
We're still working on this feature, but we'd love for you to try it out!

This feature is currently provided as part of a preview program pursuant to our [pre-release policies](/docs/licenses/license-information/referenced-policies/new-relic-pre-release-policy). During the preview period, this feature is accessible through the [Logs UI](/docs/logs/ui-data/use-logs-ui), with plans to expand to other capabilities after general availability.
</Callout>

## What you can do [#features]

Scheduled NRQL searches let you:

* **Automate repetitive queries**: Convert manual queries into automated workflows that run on your schedule.
* **Stay informed proactively**: Receive email notifications with query results delivered directly to your inbox.
* **Flexible scheduling**: Use custom cron expression schedules to define when queries run.
* **Multiple output formats**: Export results as CSV or JSON files attached to email notifications.
* **Team collaboration**: Send scheduled search results to multiple email recipients.
* **Centralized management**: View, edit, and manage all your scheduled searches from a single location in the Administration UI.

## Prerequisites [#prerequisites]

To use scheduled NRQL searches, you need:

* **User permissions**: [Workflow Automation](/docs/alerts-applied-intelligence/applied-intelligence/incident-workflows/incident-workflows/#requirements) permissions are required to create and manage scheduled searches.
* **Account access**: Access to the account where you want to schedule searches.
* **Data access**: Appropriate permissions to query the data you want to schedule. For example, if scheduling a query against log data, you need access to that log data.

<Callout variant="important">
Scheduled NRQL searches are built on New Relic's Workflow Automation infrastructure. Your organization needs appropriate permissions to create and manage workflows.
</Callout>

## Access scheduled searches [#access]

To access scheduled NRQL searches:

1. Go to **[one.newrelic.com](https://one.newrelic.com) > Administration**.
2. In the left navigation, select <DNT>**Scheduled searches**</DNT>.

When you first visit this page, you'll see an empty state with the option to **Schedule a search**.

## Schedule a new search [#create-schedule]

To schedule a new automated NRQL search:

<Steps>
<Step>
From the <DNT>**Scheduled searches**</DNT> page, click **Schedule a search** to open the configuration modal.
</Step>
<Step>
**Configure your query**:

1. Draft your NRQL query using standard NRQL syntax.
2. Test your query to ensure it returns the expected results.
3. Continue to configure the notification settings.

</Step>
<Step>
**Configure notification**:

* Enter a **Name** for your scheduled search.
* Add an optional **Description** to help identify the search purpose.
* Set a [destination](/docs/alerts/get-notified/destinations/) to receive the query results. Currently, you can only send results to email destinations.

<CollapserGroup>
<Collapser
id="existing destination-destination"
title="Select an existing destination"
>
From the dropdown, check the existing destinations. Each destination may have a group of email addresses associated with it. Choose one or more destinations to receive the query results. If the destination you want isn't listed, you can create a new one.
</Collapser>

<Collapser
id="new-destination"
title="Add a new destination"
>
To create a new destination:

1. On the <DNT>**Add a destination**</DNT> page, search and add recipients by email ID or username.
2. Enter a unique name for the destination and save.
3. New email recipients receive a verification email and must verify before receiving notifications.
</Collapser>
</CollapserGroup>

* Enter a subject and message body for the email notification.
* From the <DNT>**Include**</DNT> dropdown, select a query result format you want to include in the email.

</Step>
<Step>
**Set a schedule**:

After configuring your email notification settings, continue to set a schedule for your search as follows:

1. Choose a frequency for your search (e.g., hourly, daily, weekly, or [Cron expression](#cron-examples)).
2. Set the start time for your search with the time zone.
3. Define the **Start time** and **End time** for the search.
4. Choose one of the following conditions to send the notification:
* <DNT>**On every run**</DNT>: Receive a notification every time the search runs.
* <DNT>**On result count > 0**</DNT>: Receive a notification only when the search returns results.
</Step>
<Step>
**Review and confirm**:
After setting your schedule and notification preferences, continue to review your configuration. If you need to make further adjustments, switch back to the relevant step. After finalizing your configuration, click <DNT>**Schedule**</DNT> to create your automated search. The <DNT>**Scheduled searches**</DNT> page will display your new search in the list.
</Step>
</Steps>

## Manage scheduled searches [#manage]

The <DNT>**Scheduled searches**</DNT> page in the Administration UI displays all your automated searches with their name, description, schedule, status, and next run time. From <Icon name="fe-more-horizontal"/> you can:

* **Edit a search** to update the query, schedule, notification settings, or output format.
* **Delete a search**.
* **Duplicate a search** and update it to create a new search.

## Cron expression examples [#cron-examples]

Here are some common cron expression patterns for scheduled searches:

* `0 * * * *` - Every hour at the top of the hour
* `0 9 * * *` - Every day at 9:00 AM
* `0 9 * * 1` - Every Monday at 9:00 AM
* `0 0 1 * *` - First day of every month at midnight
* `*/15 * * * *` - Every 15 minutes
* `0 9 * * 1-5` - Every weekday at 9:00 AM

<Callout variant="tip">
When using cron expressions, remember that all times are interpreted in the time zone you select during configuration.
</Callout>

## What's next? [#whats-next]

Now that you've set up scheduled NRQL searches:

* [Learn more about NRQL queries](/docs/nrql/get-started/introduction-nrql-new-relics-query-language) to create more sophisticated automated searches.
* [Configure alert email destinations](/docs/alerts-applied-intelligence/notifications/destinations) to expand your notification options.
* [Explore workflow automation](/docs/alerts-applied-intelligence/applied-intelligence/incident-workflows/incident-workflows) for more advanced automation possibilities.
4 changes: 3 additions & 1 deletion src/nav/nrql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -60,4 +60,6 @@ pages:
- title: Browser/SPA NRQL examples
path: /docs/nrql/nrql-examples/browserspa-nrql-query-examples
- title: Mobile NRQL examples
path: /docs/nrql/nrql-examples/nrql-query-examples-mobile-monitoring
path: /docs/nrql/nrql-examples/nrql-query-examples-mobile-monitoring
- title: Schedule NRQL searches
path: /docs/nrql/using-nrql/schedule-nrql-searches
Loading