diff --git a/radar/2021-01-01/loki.md b/radar/2021-01-01/loki.md new file mode 100644 index 0000000..1ff63df --- /dev/null +++ b/radar/2021-01-01/loki.md @@ -0,0 +1,12 @@ +--- +title: "LOKI" +ring: trial +quadrant: tools +featured: true +--- + +Archiving indexed log-data with a system like Elastic Search can be expensive and archiving it as simple text files makes it hard to query them. [Loki](https://grafana.com/oss/loki/) solves this issue by adding a reference database based on kubernetes-labels to each log-line similar to prometheus, but holding the log-data inside a simple blob-storage like s3. This allows the user to query the data by pre-defined labels and keeps the costs for indexing low. + +Another benefit is the fact that does not have an endpoint for mutating log-data wich makes the data immutable from a potential compromised system. + +We at AOE are using it for longer term log-archiving in severaly kubernetes-clusters. \ No newline at end of file