Log Query Report

Last updated - 02 February, 2026

The Log Query report provides details on both raw and aggregated log data. You can schedule or run the Log Query report on an immediate basis.
For more information on creating a Log query, see Writing a Filtering Query.

Configuring a Log Query Report

To add a new Log Query Report:

1. Select Reports > Add Report > Logs Query Report to open the report settings.

General Settings

1. Enter a Name. Report names cannot include the operators and comparison functions used in LogicMonitor’s datapoint expression syntax.
   
2. Enter a Description describing the purpose of the report.
   
3. Enter a Report Group to set where your report will be stored. Matching groups display as you type, and you can select from the list.
   
4. Set the Report Availability. This option specifies how long the generated report remains available online.
   

Log Query Settings

1. Select a Time Range to indicate the duration.
   You can choose a Predefined time range or enter a Custom time range.
2. Select the query type from the Logs query section to determines how results are displayed:
   • To display basic log records, select Basic.
   • To display aggregated results, select Aggregation.
   • To display basic and aggregated results together, select Both (Basic + Aggregation).
3. Enter the query you want to run in the Log query field.
4. Select Run Query.
   A record count of the logs is displayed under the Log Query field. The query results display in the results panel, showing values in the Time and Message columns.

5. (Optional) Select Saved views to save the log query for reuse.
6. Review the results displayed in the table.
   • For Basic or Aggregation queries, results display in a single table.
   • For Both (Basic + Aggregation) queries, results display in two columns: Logs and Aggregate.
7. In the Columns section, select the column you want to include in your report.
   By default, all available fields are included. To reorder columns, drag the reorder icon next to a column name and drop the column into the desired position.

Report Schedule Settings

You can use the Report Schedule settings to schedule recurring reports that will email the results to the configured addresses.

1. Select Generate this report on a schedule.
   
2. Select the Frequency that you want this report to run.
   
3. Select the time or day that the report will run. This option depends on the Frequency you selected previously.
   
4. Set the time zone for the report.
   
5. Enter one or more Recipient’s email addresses.
   

Saving the Report

When you finish configuring your report, you can:

• Select Save to save the report and its parameters.
  
• Select Save and Run to save and run the new report to review its output.

Threshold Limits

Adhoc Requests Thresholds (Limit for number of items) = 10,000 records

Scheduled Requests Thresholds = 50,000 records