- As I know, Loki doesn't allow selecting all the logs on the given time range. For example, try selecting all the logs for the last 5 minutes in Loki query language. In LogsQL this is just '_time:5m'.
- Loki has unreadable syntax for calculating analytics over the selected logs. For example, counting the number of logs with the 'error' word over the last 5 minutes in Loki looks like:
count_over_time({required="stream_filter"} | "error" [5m])
Compare this to LogsQL:
_time:5m error | stats count() as errors
- Loki doesn't allow calculating multiple stats in a single query. For example, try calculating the number of logs with the 'error' word, plus the total number of logs, over the last 5 minutes. In LogsQL this is easy:
_time:5m | stats count() if(error) as errors, count() as total
- As I know, Loki doesn't provide functionality for sorting of the returned logs.
- Loki can return only up to 5000 logs from a single query by default. VictoriaLogs allows returning billions of logs from a single query, without any performance and resource usage issues [1].
[1] https://docs.victoriametrics.com/victorialogs/querying/#comm...