Log Aggregation
Log aggregation collects logs from many instances into central storage for unified search, analysis, and alerting, replacing per-machine SSH log checks.
Purpose
Centrally manage distributed-system logs for efficient search and troubleshooting.
Mechanism
Agents (Fluentd/Filebeat) collect instance logs and forward them centrally. Storage: Elasticsearch (full-text indexing)/Loki (label indexing). Querying: Kibana/LogQL. Correlate trace IDs to follow requests across services.
Use cases
- Log management
- Troubleshooting
- Monitoring