Notebooks
Notebooks is a lightweight space inside Logs where you can write quick notes and keep them alongside live data. It is useful when you want to document an investigation, capture observations, or build a short narrative that includes charts or tables powered by your logs. Right now, Notebooks focuses on the essentials:
- Text blocks
- Headings (H1, H2)
- Numbered and bullet lists
- Tables
- Data sources
Open Notebooks
To open Notebooks, go to Logs → Select Notebooks from the top navigation. Here, you will find list of previously created Notebooks in addition to option for creating a new Notebook.

Alternatively, you can also use the Search by name input to quickly find a notebook.

Create a new Notebook
- In Notebooks, click New Notebook
- Enter a notebook name at the top
- Start writing in the first text block
As you add headings, the Table of Contents on the left updates automatically so you can jump between sections.

Manage your saved notebooks

The Notebooks list helps you quickly understand what exists and who owns it:
- Name: Notebook title
- Author: Who created or last edited it
- Date Modified: When it was last updated
- Star icon: Mark a notebook as a favourite for quicker access later
Use the search bar to filter the list by notebook name.
Write and format content
Notebooks support simple formatting so you can keep notes readable without needing heavy markdown.
Headings
Use headings to structure your notebook and keep the Table of Contents clean.
- Use H1 for main sections
- Use H2 for sub sections
Lists
Use lists when you are capturing steps, findings, or action items.
- Bullet list for quick points
- Numbered list for sequences or runbooks
Tables
Tables are great for quick reference, like environment variables, endpoints, owners, or incident timelines. To insert a table, type / and choose the table option, then fill the cells.
Edit Mode vs View Mode
Notebooks support two modes so you can write and read comfortably.

A typical flow looks like this:
- Add a data source block in the notebook
- Configure the query and visualisation
- Use Expand Quick Edit when you need to tune the query or change the chart type
- Use the top right time picker to update the time range for the results

Available visualisations
From the data source editor, you can choose the output style using Graph Type, such as:
- Timeseries
- Bar Chart
- List Value
- Query Value
- Pie Chart
- Scatter Plot
- Tree Chart
- Top List Chart
- Hexagon Chart
Pick the type that matches your goal. For example, Timeseries for trends and List Value for a quick breakdown table.
Configure a data source with Quick Edit
Each data source block includes an Expand Quick Edit option. When expanded, you can adjust what is being queried and how it is shown. Common options you will see:
- Queries (A, B, …): Add one or multiple queries in the same block
- Field selection: Choose what you want to chart or list, like
serviceNameorseverityText - Aggregation: Options like
uniq byorany byhelp you control how results are grouped or calculated - Add Function: Apply functions to shape results further
- Add Query / Add Formula: Build multi query views or derived results
- Sort and Limit: Control ordering and how many rows appear in list outputs
- Formatting controls: Sections like Additional Formatting, Y-Axis Controls, and Legend help tune chart readability
Each query row also includes quick actions like:
- Hide or show a query
- Duplicate a query
- Delete a query
You can also delete the entire data source block from the notebook when you no longer need it.
Next Steps
- Log Monitoring Overview
- Creating Log Filters
- Custom Metrics
- Transforming Logs into Transactions
- Creating Alerts
- Real User Monitoring (RUM)
Need assistance or want to learn more about Middleware? Contact our support team at [email protected] or join our Slack channel.