Shulou(Shulou.com)06/01 Report--

This article introduces what log monitoring tools there are in Kubernetes, the content is very detailed, interested friends can refer to it, I hope it can be helpful to you.

Zebrium

Would you prefer Prometheus (Prometheus) or ELK? But Zebrium can also be a priority.

The new startup was recently selected as one of the "25 enterprise software startups worth watching by Gartner 2020".

Speaking of good practices, Zebrium also recently helped Sweetwater reduce event tracking time from three hours to just a few minutes. Zebrium can even discover hidden problems that have not been discovered before. This is an excellent feature because it can help identify problems before they affect the customer.

So what makes Zebrium stand out from the competition? Zebrium uses artificial intelligence to discover problems and automatically discover root causes, while all other tools rely on users to add rules manually. Zebrium can also be used as a stand-alone log management platform or integrated with ELK Stack or other log managers.

Advantages: easy to start; simply copy / paste custom HELM or kubectl commands; automatically detect problems and root causes without manual rules; can be used as a stand-alone log management tool or as a machine learning attachment to existing log management tools such as ELK Stack.

Cons: the free plan is limited to 500 MB per day for 3 days; supports Kubernetes,Docker and most common platforms, but does not support Windows.

Sematext

Solutions for log management and application performance monitoring. Sematex provides full-stack visibility of the system state.

Sematext is not limited to Kubernetes logs, but can also be monitored and Kubernetes (based on metrics and logs). The collected logs are automatically parsed / structured for several different known log formats, and users can also provide a custom log mode. It also exposes Elasticsearch API, so you can also use any tool that works with Elasticsearch, such as Filebeat and Logstash and Sematex. You can use it as a variant of ELK or with the native Sematext ecosystem. This tool helps create specific rules to monitor specific situations and catch exceptions. With Sematex's comprehensive real-time dashboard, customers can control and monitor all services.

Advantages: integration with other Sematext cloud tools; configurable overrun to prevent logs from being accepted to control costs; flexibility of ELK.

Disadvantages:

Sematext widgets and Kibana cannot be mixed on the same dashboard; custom parsing needs to be done in the log transporter, and Sematext parses Syslog and JSON; traces only on the server side, but improvements are planned.

Loki

Loki works with Grafana,Prometheus and Kubernetes. Loki can make internal processes more efficient. Loki does not index your log content, but only a set of tags for each event stream, so it is very efficient.

Advantages: large ecosystem; rich visualization capabilities; improved efficiency due to unindexed log content.

Cons: not optimized for Kubernetes log management; a large number of schema rules work manually; lack of content indexes may limit search performance.

ELK Stack

ELK is a well-known open source tool for log management. ELK is the initials of Elasticsearch,Logstash and Kibana. Each component is responsible for a different part of the logging process. Elasticsearch is a powerful and scalable search system. Logstash aggregates and merges logs, while Kibana provides an analytical and visual interface to help users understand the data. Together, they provide a comprehensive logging solution for Kubernetes. But there are many other variants of ELK Stack, such as EFK Stack, which is composed of Elasticsearch,Fluentd and Kibana.

ELK is used by many large companies such as Adobe,T-Mobile and Wal-Mart, so it can prove to be productive. So ELK is a reliable and proven tool. But it brings complexity and a lot of resources for work.

Pros: ELK is well known and has a large community; very extensive platform support; rich analysis and visualization capabilities in Kibana; and complex analysis of logs and manually defined alert rules.

Disadvantages: it is difficult to maintain scale; requires a lot of adjustments, especially for large environments; a large number of resource requirements; and some functions require paid licenses.

Fluentd

Fluentd is a cross-platform open source data collector that provides a unified logging layer, but it is not a separate log manager. As a popular tool, it has more than 5000 customers such as Atlassian, Microsoft and Amazon. Seeing these large customers, we can confirm their reliability and performance. In addition, Fluentd has created a unified logging layer that helps use data more efficiently and iterate over data quickly in software. It can help you process 120000 records per second.

Advantages: large community and plug-in ecosystem; unified logging layer; proven reliability and performance. It can be installed in less than 10 minutes.

Disadvantages: difficult to configure; limited support for converted data; not a complete logging solution.

About which log monitoring tools in Kubernetes are shared here, I hope the above content can be helpful to you and learn more knowledge. If you think the article is good, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.