series: Logs & Observability
- Promtail: shipping Traefik access logs to VictoriaLogs Traefik JSON access logs into VictoriaLogs with Promtail: a static path glob instead of kubernetes_sd, label cardinality choices, and pipeline drop stages.
- VictoriaLogs on k0s: a log database that fits in 128 MiB Single-pod VictoriaLogs: 90 lines of YAML, Recreate strategy for hostPath storage, Loki-compatible ingestion, LogsQL basics, and Grafana datasource pitfalls.
- Elasticsearch Index Lifecycle Management ILM policy hot→delete for vector-* indices: rollover at 20GB or 7 days, delete after 30 days. Index template, write alias bootstrap, idempotent bootstrap script.
- Loki and LogQL: logs without Elasticsearch overhead Grafana Loki in SingleBinary mode, Grafana Alloy as promtail replacement, LogQL stream selectors, JSON parsing, rate queries, and trace ID correlation between logs and Jaeger.
- Vector: log pipeline from Kubernetes to Elasticsearch Vector DaemonSet, VRL transforms for JSON parsing and health-check filtering, sensitive field redaction, ServiceMonitor for pipeline metrics, and dual sink to Elasticsearch plus S3 archive.
- Elasticsearch in Kubernetes: HelmRelease, ingest pipelines, and bootstrap Deploying Elasticsearch via Flux from a git-bundled chart, then bootstrapping index templates, ingest pipelines, and replica settings with a shell script.
- VictoriaLogs + Vector: replacing EFK with a lightweight log stack Vector DaemonSet routes app logs to Elasticsearch and error-level logs to VictoriaLogs. VRL transforms, deduplication, and the VictoriaLogs Elasticsearch-compatible sink.
- Elastic APM Server in Kubernetes APM Server HelmRelease from the elastic chart, OTLP/gRPC ingestion, Elasticsearch credentials via ESO, number_of_replicas:0 for single-node, bootstrap in the ES script.
No posts match the selected filters.