nano SIEM
Search Commands

services

services

Open the observability services overview — RED metrics (rate, errors, duration) for every service — directly from the search bar.

Description

The services command is a command-page: it paints the curated services-overview surface, the same grid as the Observability console's Services tab, sourced from OpenTelemetry spans (otel_spans).

Like cloud (bare), it is a page directive that takes no argument and short-circuits: no ClickHouse scan is issued and any search expression before it is ignored. The page fetches its own per-service RED summary.

Syntax

| services

What the page shows

  • A row per service with request rate, error rate, and duration percentiles (p50/p95/p99)
  • Sortable by any RED column to surface the noisiest or slowest services
  • Click a service to drill into its service detail page

Examples

Open the services overview

| services

Usage Notes

Terminal command: services must be the final command in the pipeline.

No scan: the command does not read the logs table; it opens the curated overview, which fetches its own data.

Requires OTLP data: populated from ingested OpenTelemetry spans.

  • service - Open a single service's detail page
  • trace - Open a distributed-trace waterfall by id
  • metric - Open the metric time-series explorer
On this page

On this page