Logs & Observability
8 posts in reading order. All series →
Tags, archive, series1 active
Posts 8
-
Elastic APM Server in Kubernetes
APM Server HelmRelease from the elastic chart, OTLP/gRPC ingestion, Elasticsearch credentials via ESO, number_of_replicas:0 for single-node, bootstrap in the ES script.
-
VictoriaLogs + Vector: replacing EFK with a lightweight log stack
Vector DaemonSet routes app logs to Elasticsearch and error-level logs to VictoriaLogs. VRL transforms, deduplication, and the VictoriaLogs Elasticsearch-compatible sink.
-
Elasticsearch in Kubernetes: HelmRelease, ingest pipelines, and bootstrap
Deploying Elasticsearch via Flux from a git-bundled chart, then bootstrapping index templates, ingest pipelines, and replica settings with a shell script.
-
Vector: log pipeline from Kubernetes to Elasticsearch
Vector DaemonSet, VRL transforms for JSON parsing and health-check filtering, sensitive field redaction, ServiceMonitor for pipeline metrics, and dual sink to Elasticsearch plus S3 archive.
-
Loki and LogQL: logs without Elasticsearch overhead
Grafana Loki in SingleBinary mode, Grafana Alloy as promtail replacement, LogQL stream selectors, JSON parsing, rate queries, and trace ID correlation between logs and Jaeger.
-
Elasticsearch Index Lifecycle Management
ILM policy hot→delete for vector-* indices: rollover at 20GB or 7 days, delete after 30 days. Index template, write alias bootstrap, idempotent bootstrap script.
-
VictoriaLogs on k0s: a log database that fits in 128 MiB
Single-pod VictoriaLogs: 90 lines of YAML, Recreate strategy for hostPath storage, Loki-compatible ingestion, LogsQL basics, and Grafana datasource pitfalls.
-
Promtail: shipping Traefik access logs to VictoriaLogs
Traefik JSON access logs into VictoriaLogs with Promtail: a static path glob instead of kubernetes_sd, label cardinality choices, and pipeline drop stages.
No posts match the selected filters.