Datadog Log Management Fundamentals free question 6 / 10 · Domain 3: Log Searching & Filtering
You are in the Log Explorer and want to switch to Live Tail, which shows logs as they flow into Datadog. Which action does the documentation describe?
- On the Configuration page, enable Live Tail for each index
- In the list of visualizations, change from List to Live Tail
- Open the time range selector and choose the Live Tail option
- Turn on the Live Tail switch at the top of the facet panel
Show the answer and explanation
Answer: C
Why this is correct
The "Live Tail view" section says: "In the Log Explorer, choose the Live Tail option in the timerange to query logs as they flow into Datadog." Live Tail is not a feature you turn on in a separate settings page. It sits in the Log Explorer as one of the choices of the time range. When you pick a past time range, your query runs on the logs already in your indexes; when you pick Live Tail, the same query runs on logs as they are flowing in, and the page points to Log Search Syntax for how to write that query.
Why the other options are wrong
"Turn on the Live Tail switch at the top of the facet panel" … The facet panel is where you pick facet values to scope the search. The page places the Live Tail option in the time range, not in the facet panel.
"In the list of visualizations, change from List to Live Tail" … The visualization choices decide how search results are displayed. The page places the Live Tail option in the timerange of the Log Explorer, not among the visualizations.
"On the Configuration page, enable Live Tail for each index" … Index settings decide where logs are stored and for how long. The page has you choose Live Tail in the Log Explorer itself, in the timerange, with no setting to turn on.
Key point
Because Live Tail is a choice of the time range, the query in the search bar stays as it is when you switch. You can move between a range such as the past 15 minutes and Live Tail and compare the past with the present under the same conditions.