ClickHouse for Self-Hosted Logs
ClickHouse can store TB of logs on one node, query in seconds, and outscale Loki and Elasticsearch in raw cost. Here's how to wire it up with Vector and Grafana.
All the articles with the tag "logging".
ClickHouse can store TB of logs on one node, query in seconds, and outscale Loki and Elasticsearch in raw cost. Here's how to wire it up with Vector and Grafana.
awk is perfect for parsing logs. 5 patterns for filtering, summing, counting, splitting fields, and reformatting—no Perl or Python required.
ELK does everything and wants all your memory. Loki does logging the Prometheus way — label indexes, not content — and runs on a fraction of the resources. Here's the honest comparison.
logrotate keeps your /var/log from eating the disk — configure rotation schedules, compression, and retention for any service log.
Service restart not showing logs? systemd hides stdout. Learn journalctl, systemctl status, and debugging workflows for silent systemd failures.
Your app is logging to a single file. It's 50GB now. Here's how to rotate logs before your disk dies.
Learn Docker logging from basics to centralized stacks. Master docker logs, logging drivers, log rotation, Loki+Grafana, and Fluentd setup with practical examples.
Master auditd for Linux audit logging: watch critical files, audit syscalls, use aureport and ausearch, and ship logs to Loki or Elasticsearch for compliance and security monitoring.
auditd logs every system call, file access, and command run on your Linux server. Learn ausearch, aureport, and how to write audit rules that catch it.
Essential journalctl commands: -u, -f, --since, -p, -k, -b, --no-pager, JSON output. The queries you need on a broken server at 2 AM.
Docker's default JSON logging driver writes unbounded logs to disk. Learn how to set log rotation and reclaim your storage.
btmp logs failed logins and grows forever on internet-facing servers. Set up logrotate to keep it under control before your disk fills up.