Search is available on several major Sentry views: Issues, Events, and Releases.
Looking for information on Discover?
Queries are constructed using a
key:value pattern, with an optional raw search at the end. Each
key:value pair is a
token and the optional raw search is itself a single
tokens are treated as issue or event properties. The optional raw search is treated as a single
token and searches event titles/messages.
is:resolved user.username:"Jane Doe" server:web-8 example error
In the example above, there are three keys (
server:), but four tokens:
user.username:"Jane Doe" are standard search tokens because both use reserved keywords. See Issue Properties and Event Properties for appropriate keyword usage. The token
server:web-8 is pointing to a custom tag sent by the Sentry SDK. See Custom Tags for more information on how to set tags.
example error is utilizing the optional raw search and is passed as part of the issue search query (which uses a CONTAINS match similar to SQL). When using the optional raw search, you can provide one string, and the query uses that entire string.
NOTE: Search for Releases supports raw text but not query syntax.
AND between tokens, and use parentheses
() to group conditions.
AND can also be used between non-aggregates and aggregates. However,
Non-aggregates filter data based on specific tags or attributes. For example,
user.username:janeis a non-aggregate field.
Aggregates filter data on numerical scales. For example,
count()is an aggregate function and
count():>100is an aggregate filter.
Some examples of using the
# a valid `OR` query browser:Chrome OR browser:Opera # an invalid `OR` query user.username:janedoe OR count():>100
Also, the queries prioritize
OR. For example, "x
OR z" is the same as "(x
OR z". Parentheses can be used to change the grouping. For example, "x
We recommend you never use reserved keywords (such as
project_id) as tags. But if you do, you must use the following syntax to search for it:
By default, search terms are
AND-ed together; they return the intersection of issues/events that match all search terms.
To change this, you can use the negation operator
! to exclude a search parameter.
In the example above, the search query returns all Issues that are unresolved and have not affected the user with the email address
Search supports the wildcard operator
* as a placeholder for specific characters and strings.
In the example above, the search query will match on
browser values like
"Safari 11.0.3", etc.
You may also combine operators like so:
In the above example, the search query returns results which do not have message values like
In the examples above, we've highlighted a couple of example properties you can search on:
browser, etc. Below is a canonical list of all available search terms.
Issues are an aggregate of one or more events. Searchable properties include workflow status, assignment, aggregate counts, and age.
Below is a list of Issue-level tokens reserved and known to Sentry:
- Restrict results to issues created since
age. The syntax is similar to the Unix
Issues new in the last 24 hours:
Issues older than 12 hours:
Issues created between 12 and 24 hours ago:
m -> minutes
h -> hours
d -> days
w -> weeks
- Filter on the user which the issue is assigned to.
Values can be your user ID (your email address),
me for yourself, or
- Filter on the user which the issue is bookmarked by.
Values can be your user ID (your email address) or
me for yourself.
- Restrict results to issues first seen within the given release.
Exact match on the version of a release, or
first-release:latest to pick the most recent release.
- Restrict results to issues which have any value for a tag.
- Filter on the status of an issue.
- Restrict results that were last seen since or until a given point in time. Usage is similar to the
agetoken (see above).
Issues last seen 30 days ago or more:
Issues last seen within the last two days:
- Filter on the status of an issue.
- Restrict results to issues that have been seen exactly, at least, or at most some number of times.
Upper or lower bounds:
Events are the underlying event data captured using Sentry SDKs (read: errors and exceptions).
When searching on Event properties within the Issues search, Issue Search will return any Issue that has one or more events matching the supplied event filters.
Below is a list of Event-level tokens reserved and known to Sentry:
- Restrict results to the events with a matching location.
- Restrict results to a matching message
- Restrict results to events tagged with the given environment.
- Restrict results to events tagged with the given release.
Exact match on the version of a release, or
release:latest to pick the most recent release.
- Restrict results to events tagged a URL template/job name.
- Restrict results to events triggered by a geographic area.
- Restrict results based on the HTTP request context.
- Restrict results to events affecting the given user.
- Restrict results to events that occurred at the given timestamp. This filter can be passed twice to provide a range.
Events occurred on January 2, 2016:
Events between 01:00 and 02:00 (UTC):
The following comparative operators are available:
- greater than (
- greater than or equal (
- less than (
- less than or equal (
- Restrict results to events tagged with a specific device attribute.
- Restrict results to events tagged with a specific operating system property.
- Restrict results to events with a matching stack property. Note: For Native SDK users,
stack.packageis the Native equivalent for
stack.module. For more details about enhancing search, see the full documentation on adding context and customizing tags.
- Restrict results to events with a matching error property.
Additionally, you can use any tag you’ve specified as a token. Tags are various key/value pairs that get assigned to an event, and you can use them later as a breakdown or quick access to finding related events.
Most SDKs generally support configuring tags by configuring the scope:
Several common uses for tags include:
- The hostname of the server
- The version of your platform (for example, iOS 5.0)
- The user’s language
Premade searches are common search terms that we think you're likely to use. The premade searches will appear in the order of which you've most recently used them.
You can pin a search, and it will become the default view you see on your Issues view. The pinned search is only visible to you and is relevant across your projects.
Type a search into the search bar.
Click the pin icon next to that search.
Once pinned, Sentry will add the search to the Saved Search Dropdown. The search label in the text will read: My Pinned Search.
To change your pinned search, do the following:
Select your pinned search. Un-click the pin icon. Your default search will return to
Do another search. Click the pin icon. The query listed as 'My Pinned Search' will now be the new pinned query, instead of the original one.
You can pin a premade search the same way you pin any other search. When you've selected a premade search, and the premade search query populates the search bar, pin it.
Owners and managers can create a persistent view for their organization by creating custom saved searched. These saved searches will not be associated with a specific project, but with all projects (and users) across the org.
Type a search into the search bar, then click the "add to Organization saved searches" icon just to the right of it. Keep in mind that you need to be an owner or manager within the org to use this feature.
Name the search in the resulting modal and click 'Save.'
The view will then become part of the saved search dropdown.
When an owner or manager hovers over a custom saved search, they should see a trash can icon. The trash can icon functions exactly like you might expect, and removes the custom saved search from the dropdown.