Goal

• Design a query language for log exploration.
• Refactor existing prototype API and implementation to use this language.

Requirements

The existing API prototype queries on a fixed set of terms (namespace, pod name and so on) represented as endpoints in a URL hierarchy.

To meet the requirements of LOG-555, we need to switch to a flexible query language (think of a simplified LogQL) that can

• Query on an open set of terms, with standard match operators (<, >, =, regexp )
• Allow boolean combinations (and, or, not) of match expressions
• Translate accurately to the query languages of existing (and possible future) back-ends, including:
  • Elasticsearch queries
  • LogQL for Loki
  • k8s selectors