TechradarDev/radar/2021-01-01/loki.md

title, ring, quadrant, featured

title	ring	quadrant	featured
LOKI	trial	tools	true

Archiving indexed log-data with a system like Elastic Search can be expensive and archiving it as simple text files makes it hard to query them. Loki solves this issue by adding a reference database based on kubernetes-labels to each log-line similar to prometheus, but holding the log-data inside a simple blob-storage like s3. This allows the user to query the data by pre-defined labels and keeps the costs for indexing low.

Another benefit is the fact that does not have an endpoint for mutating log-data which makes the data immutable from a potential compromised system.

We at AOE are using it for longer term log-archiving in several kubernetes-clusters.