# Simple Guide to Viewing Logs in Kibana

## First Time Setup
Run this once after installing LogServer:
```bash
./setup-kibana.sh
```

## Viewing Logs - The Easy Way

### 1. Open Kibana
Go to: `http://<your-server>:5601`

### 2. Login
Use the username and password from your service.env

### 3. Click "Discover"
It's in the left menu (looks like a compass icon)

### 4. You're Done!
Your logs are now visible. That's it!

## Simple Controls

### See Recent Logs Only
- Top-right corner: Click the time picker
- Choose "Last 15 minutes" or "Last 1 hour"

### Filter by Container
- Find any log entry
- Next to `container_name`: click the `+` button
- Now you only see logs from that container

### Filter by Server
- Next to `host.name`: click the `+` button
- Now you only see logs from that host

### Search for Text
- Top search bar: Type any word
- Press Enter
- Shows only logs containing that word

### Live Updates
- Top-right: Click "Refresh"
- Choose "Every 5 seconds"
- Logs update automatically

### Remove Filters
- Look for filter pills under the search bar
- Click the `x` on any filter to remove it

## Common Searches

**Show errors only:**
```
error OR ERROR OR Error
```

**Show warnings and errors:**
```
error OR ERROR OR warn OR WARN
```

**Show specific container:**
```
container_name: "myapp"
```

**Show multiple containers:**
```
container_name: ("app1" OR "app2")
```

## Tips

1. **Too many columns?** Click "container_name" and "message" in the left sidebar to show just those

2. **Want raw logs?** Click the ">" arrow next to any log entry to expand it

3. **Export logs?** Click "Share" → "CSV Reports" → "Generate CSV"

4. **Time zone wrong?** Click your profile icon → "Advanced Settings" → search "timezone"

That's all you need to know! Kibana has many advanced features, but for basic log viewing and searching, these commands are sufficient.