From 74845e77888da2ff918bfbe490a135832b594399 Mon Sep 17 00:00:00 2001 From: jochen weber Date: Mon, 21 Jun 2021 08:42:56 +0200 Subject: [PATCH] add loki --- radar/2021-01-01/loki.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 radar/2021-01-01/loki.md diff --git a/radar/2021-01-01/loki.md b/radar/2021-01-01/loki.md new file mode 100644 index 0000000..1ff63df --- /dev/null +++ b/radar/2021-01-01/loki.md @@ -0,0 +1,12 @@ +--- +title: "LOKI" +ring: trial +quadrant: tools +featured: true +--- + +Archiving indexed log-data with a system like Elastic Search can be expensive and archiving it as simple text files makes it hard to query them. [Loki](https://grafana.com/oss/loki/) solves this issue by adding a reference database based on kubernetes-labels to each log-line similar to prometheus, but holding the log-data inside a simple blob-storage like s3. This allows the user to query the data by pre-defined labels and keeps the costs for indexing low. + +Another benefit is the fact that does not have an endpoint for mutating log-data wich makes the data immutable from a potential compromised system. + +We at AOE are using it for longer term log-archiving in severaly kubernetes-clusters. \ No newline at end of file