TechradarDev/radar/2021-07-01/loki.md

title, ring, quadrant, tags

title	ring	quadrant	tags
Loki	trial	tools	devops

Archiving indexed log data with a system like Elasticsearch can be expensive, and archiving it as simple text files makes it hard to query. Loki solves this issue by adding a reference database based on Kubernetes labels to each log line, similar to Prometheus, but storing the log data inside a simple blob storage like AWS S3. This allows the user to query the data by predefined labels and keeps the costs for indexing low.

Another benefit is that Loki does not have an endpoint for mutating log data, making the data immutable from a potentially compromised system.

At AOE, we use Loki for long-term log archiving in several Kubernetes clusters.