Building a Centralized Logging Infrastructure

[mjp]

https://www.aptible.com/blog/the-long-journey-toward-log-drains

[apitman]

For small deployments, you might be surprised how far you can get with just systemd/journalctl. It even has built in aggregation over a network.

[atgarone]

"joecool" and "gentlemanjerry" lol

Good article. My teams frequently had problems with logstash. It's harder to do logging than you'd think.

[synthc → atgarone]

Logstash is terrible, i've had so many problems with it.

[esafak → synthc]

what do you prefer?

[synthc → esafak]

With logstash I had cases where it was taking more resources than the application that generated the damn logs.

These days i prefer fluentd, but in some cases I let my apps insert directly into ElasticSearch.

[gabriellavaldes → esafak]

at aptible - we prefer fluentd. one of our engs talks about the reasons why in the article above, but the tldr is fluentd is extensible like logstash, but far better performance

[RadiozRadioz]

Splunk?

[hazmazlaz → RadiozRadioz]

If you're a trillionaire then sure, absolutely :D Splunk is a great tool but oh boy is it ever expensive!