Product DocsMenu

Coveo Platform 7.0 >
Administrator Help > Coveo Enterprise Search 7.0 > Administration Tool > Logs Tab > What Information Is Displayed in the Query Log?

What Information Is Displayed in the Query Log?

The Query page displays detailed information concerning each query made (query expression, username, number of results, number of pages opened, etc.)—each query is a separate entry in the Query log. It is used to determine precisely what the user querying habits are in order to customize the Coveo Platform.

Example: If Enterprise Search is a frequent query that returns no result, it is possible to add synonyms for it in the thesaurus (ex.: associate it to CES) so that it returns pertinent documents.

The Query page is made of two sections:

  • The Filters section allows to choose what information is displayed in the logs.

  • The Logs section displays the events in ascending or descending order.

Note: Before creating logs, it is preferable to adapt the log settings that determine the level of detail registered for each log and the time period during which logs are kept. By default, they are deleted after 90 days (see Modifying the Log Settings).

Filter Description


Displays the queries that have occurred in a fixed time period (the last hour, 6 hours, week, etc.) or custom time period (delimited by two dates).


Displays the queries made on different mirror indexes.

Note: The query log can only be displayed for one mirror at a time.

Log Fields

Displays 18 types of information about each query:

Severity: The severity of an event ranges from normal to critical. Normal events occur as part of CES processes; whereas, critical events indicate errors likely to cause a system failure. NORMAL status is attributed to Successful, No Result and Corrected queries; whereas, erroneous queries are attributed a WARNING. For more information concerning severity types, refer to the Severity filter section below.

Time: The time (in hours, minutes, seconds) at which the query was sent.

Duration: The number of seconds CES took to perform the search.

User: The name of the user who sent the query. Usernames are registered only if, in the Queries section of the Settings page (Logs > Settings), the Record the username and IP address for each query check box is selected.

IP address: The IP address of the computer from which the query was sent. IP addresses are registered only if, in the Queries section of the Settings page (Logs > Settings), the Record the username and IP address for each query check box is selected.

Query: The expression queried.

Advanced query: The fields queried using the advanced search or the Refine by function of the result page.

Collections: The collections queried—if the search was restricted by collection using the advanced search.

Corrected: Whether a spelling correction was proposed for the query or not.


First result: The rank of the page opened—each page opened is a different log entry. The first page indicates 0, the second page indicates the number of results on the previous page (ex.: if the Requested results is 10, the second page displays 10), the third page displays the number of results on the two previous pages (ex.: if the Requested results is 10, the third page displays 20), and so on.

Requested results: The number of results per page requested by the user.

Returned results: The total number of results returned by the search.

Filtered: Whether duplicate documents are filtered or not.

Sort by: The parameter used to sort results.

Status: The type of query according to its results (Successful, Erroneous, No Result or Corrected).

Error code: The error code for Erroneous queries (usually TOO_MANY_TERMS). For Successful, No Result and Corrected, the error code is SUCCESS.

Index: The index on which the query is performed.

Mirror: The mirror on which the query is performed (which is the same as the Mirror filter selected).


Displays four types of information for each event:

Details: Precise information about normal events.

Information: Generic information about normal events. This category is divided in two subcategories: IMPORTANT and NORMAL. Successful, No Results and Corrected queries are attributed NORMAL severity. IMPORTANT severity identifies essential system processes (ex.: starting the Coveo instance), thus it is not used for queries.

Warning: Information about non-critical abnormal event. Erroneous queries are attributed a WARNING.

Error: Information about critical abnormal events. Critical abnormal events are likely to cause system failures.

Note: By default, details are not displayed because they are not useful for troubleshooting (they describe events not essential to the system functioning) and because they create much longer logs.

Query Status

Determines which queries are displayed in the logs according to their status.

Successful: The query returned at least one document.

Erroneous: The query contained too many terms and was truncated—the maximum number of terms per query is specified in the Advanced page.

No result: The query did not return any document.

Corrected: Users choose to apply a spelling correction proposed by CES.

Super User Access

Determines which queries are displayed when you enter a super user token in the text box. You can find the existing super user token in the ID column from the Super User Access page (see Managing Super User Access). Leave the text box empty to view all queries performed with all super user tokens.

In the logs, the Super User Access column indicates the super user token used, the On behalf column indicates the user that performed the super user queries, and the Full access from index browser column indicates if the query was performed in the Index Browser.

People who viewed this topic also viewed