Events are the raw underlying data of query results.
Events can be individual spans within a trace or individual log messages.
Access Events
To access the underlying events of a query, click on any single point in time in the query result graph, and then choose View events from the context menu.
Tip
Don’t worry! Even though you selected a single event, you will still be able to page through all of the other events belonging to the query.
View Events
Honeycomb’s Explore Data tab shows you:
An Events table, which contains all of the raw data from your current query, ignoring the query’s aggregates, and any GROUP BY or ORDER BY fields.
Your data starts with the most recent events that occurred from the timestamp of the point you selected.
A Fields list, which shows you all of the fields that contain data for your query.
If you don’t see a field in your dataset in this list, that means the spans in your query do not contain data for that field.
Events Table
The Events table contains all of the raw data from your current query, ignoring the query’s aggregates, and any GROUP BY or ORDER BY fields.
An additional Event column displays all of the other fields and their corresponding values. You can customize the display formatting for this column and interact with the fields contained within the column to modify the query.
Each row represents an event, along with the values associated with the fields from your dataset.
If you don’t see a field in your dataset in the Fields list, that means the spans in your query do not contain data for that field.
To save space in the Fields list, only a subset of the fields are immediately shown.
You can use the search box to search for a particular field by name.
To expand the list to see more, scroll to the bottom of the list of fields, and select Load More.
Customize Events Display
To make the Events display work for you, you can control which fields are visible in the Events table and customize the display formatting for the Events column.
In the Displayed Fields list, locate the field you want to remove from the table.
Select the X icon to the right of the desired field.
In the Events table, locate the Event column.
In the Event column, select the field name of the field with which you want to interact.
Select Remove column from table from the context menu.
If you don’t see the Remove column from table option, the field is already not a column in your table.
The Events table will update, and the column representing the selected field will no longer appear.
Reorder Columns in the Events Table
In the Displayed Fields list, select the icon next to the field, and drag to rearrange the columns in the table.
Customize Display Formatting for the Event Column
To customize the table formatting:
In the Events table, locate the Event column.
Select the ellipses to the right of the column name.
Select the toggle that targets the behavior you want to customize:
Format data: Display all fields in a single, pipe-delimited line (off) or one field per line (on).
Automatically highlight fields: Display field names in black (off) or orange (on).
The Events table will update, and you will see your selected changes.
Customize Paging
To customize paging for the Events table:
Locate the # of rows dropdown above the Events table.
Select the number of rows you would like to show per page.
The Events table will update, and you will see the number of rows you selected on each page.
Page Through Events
To page through the data in the Events table:
Locate the arrow buttons above the table.
Select the appropriate button:
>: Move to the next page.
<: Move to the previous page.
Modify the Query
The Event column contains a list of fields and their values for the event, each of which you can interact with to modify the query or customize the table display.
In the Events table, locate the Event column.
In the Event column, select the field name of the field with which you want to interact.
Select the action you want to take from the context menu:
Add column to table: Adds the field to the columns displayed in the Events table.
Remove column from table: Removes the field from the columns displayed in the Events table.
Copy field name: Copies the field name to your local clipboard.
Copy value: Copies the value name to your local clipboard.
Show only where field exists: Adds a WHERE clause to filter by <field> exists, then re-runs the query.
-Show only where field does not exist: Adds a WHERE clause to filter by <field> does-not-exist, then re-runs the query.
Show only where field is value: Adds a WHERE clause to filter by <field> = <value>, then re-runs the query.
Show only where field is not value: Adds a WHERE clause to filter by <field> != <value>, then re-runs the query.
Group by field: Adds a GROUP BY clause to group by <field>, then re-runs the query.
Tip
If you don’t see the Add column to table option, the field is already a column in your table.
If you don’t see the Remove column from table option, the field is already not a column in your table.
View Tracing Details
If your dataset is a tracing dataset, then the trace.trace_id column displays trace ID fields as hyperlinks.
Locate the event for which you would like to view a trace.
