After log data is successfully collected and the index is correctly configured, you can view the collected log data in real time in the TLS console and query logs from a specified time range using query condition.

This topic describes the steps for querying logs from multiple topics.

Notice

The retention period of log data in TLS is defined by the log retention period of the log project. Expired and deleted logs can not be queried.

Multi-topic queries occupy the concurrency quota of single-topic queries.

Cross-region log topic selection is supported, with up to 50 topics added per query.

Joint analysis of logs across multiple topics is not supported.

Prerequisites

The log project and log topic are created.

Log data is collected via LogCollector or other methods.

You must enable the index before querying logs. For steps to enable the index, see Configuration Index.

Steps

Select the region where TLS is located from the top navigation bar.

On the left navigation bar, select Common functions > Query and analysis.

On the Query and analysis page, click the + icon.

Under the Multi-Topic retrieve tab, select multiple log topics and click Confirm.

Specify the time range on the query and analysis page for the log topic.

The default is the past 5 minutes. You can customize the query time range. If the log data storage time is outside the specified query time range, it will not be retrieved.

Enter query criteria and click Search.

You can use the AI assistant to help generate queries and statements. For details, see Smart assistant copilot.

For supported query methods, see Query overview. For supported query syntax, see Query syntax.

If the query criteria are empty, all logs within the specified time range are queried.

For details about query results, see View query results.

Last updated: 2025.12.30 15:11:40

Public security network record in Beijing: No. 11010802032137