Best Practices for Analyzing Errors [VF 21.3 UG]

It is particularly relevant for users to know that when analyzing an error, it can be particularly helpful to explicitly filter on the fields mentioned before. This is due to the fact that Kibana will display only a limited amount of log entries at once. Taking this into consideration, the table view contains information on all of a log entries fields. That information can be used to get the 'service' or 'correlationId' and filter for related messages.
Another recommended approach is to start off by limiting the level (using numericLevel) to find relevant log messages. A user can then expand the search to more detailed messages using filters like 'service' or 'correlationId'.
Please note that search criteria can combined using Lucene query syntax' (documentation for that is linked from Kibana's search bar).