---
title: Logs
description: Use Elastic Application Performance Monitoring (APM) logs to investigate services, group similar events into patterns, and search custom indices.
url: https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/8483/solutions/observability/apm/logs
products:
  - APM
  - Elastic Cloud Serverless
  - Elastic Documentation
  - Elastic Observability
applies_to:
  - Elastic Cloud Serverless: Generally available
  - Elastic Stack: Generally available
---

# Logs
To troubleshoot a slow or failed transaction, select a service, then select **Logs**. The tab shows that service's application and container log events, while maintaining any environment, query, and time range filters already set.
From here you can inspect a specific failure, group similar messages to see what's changed, or jump from a correlated log to its trace.
![Logs tab grouping service logs into patterns with event counts and timelines](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/8483/solutions/images/observability-logs.png)


## View log events

The tab opens with **Log Events** selected, with the table showing each individual event. Use this view when you already have a specific event in mind: an error message, a timestamp, or a `trace.id` from a failed transaction. Select a row to inspect the message and fields, or select **Open logs in Discover** to search the same documents with a wider query.

## Group logs by pattern

<applies-to>
  - Elastic Cloud Serverless: Preview
  - Elastic Stack: Preview since 9.0
</applies-to>

Select **Log Events**, then select **Log Patterns** to group similar messages. Each pattern shows its event count, change type, and change time.
The [`observability:newLogsOverview`](https://docs-v3-preview.elastic.dev/elastic/kibana/tree/main/reference/advanced-settings#observability-new-logs-overview) advanced setting controls log pattern grouping:
- <applies-to>Elastic Cloud Serverless: Preview</applies-to> <applies-to>Elastic Stack: Preview since 9.2</applies-to> The setting is on by default. Turn it off to hide **Log Patterns**.
- <applies-to>Elastic Stack: Preview from 9.0 to 9.1</applies-to> The setting is off by default. Turn it on to use **Log Patterns**.

The **Logs** tab searches indices that match the patterns configured in `observability:logSources`. To include custom log indices, see [Configure log data sources](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/8483/solutions/observability/logs/log-data-sources).

## Correlate logs and traces

To send application logs and correlate them with traces, refer to [Send application log data](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/8483/solutions/observability/logs/stream-application-logs).