Datadog Query Syntax
Operators
| Operator |
Example |
Description |
AND |
service:api status:error |
Both conditions (implicit) |
OR |
status:error OR status:warn |
Either condition |
- |
-status:info |
Exclude |
* |
service:api-* |
Wildcard |
>= <= |
@http.status_code:>=400 |
Numeric comparison |
[TO] |
@duration:[1000 TO 5000] |
Range |
Common Attributes
| Attribute |
Description |
service |
Service name |
status |
Log level (error, warn, info, debug) |
host |
Hostname |
@http.status_code |
HTTP status code |
@http.method |
HTTP method |
@http.url |
Request URL |
@error.kind |
Error type |
@error.message |
Error message |
@trace_id |
Trace ID |
@dd.trace_id |
Datadog trace ID |
Time Formats
Relative
1m - 1 minute30m - 30 minutes1h - 1 hour6h - 6 hours24h - 24 hours7d - 7 days
Absolute
- ISO 8601:
2024-01-15T10:30:00Z
Example Queries
status:error
service:api status:error
@http.status_code:>=500
-status:info
service:api OR service:payment
error:timeout OR @error.kind:TimeoutError
@duration:>=1000