HN Explorer

8 comments

[ 3.0 ms ] story [ 30.7 ms ] thread
atgarone
"joecool" and "gentlemanjerry" lol

Good article. My teams frequently had problems with logstash. It's harder to do logging than you'd think.

synthc
Logstash is terrible, i've had so many problems with it.
esafak
what do you prefer?
gabriellavaldes
at aptible - we prefer fluentd. one of our engs talks about the reasons why in the article above, but the tldr is fluentd is extensible like logstash, but far better performance
synthc
With logstash I had cases where it was taking more resources than the application that generated the damn logs.

These days i prefer fluentd, but in some cases I let my apps insert directly into ElasticSearch.

anderspitman
For small deployments, you might be surprised how far you can get with just systemd/journalctl. It even has built in aggregation over a network.
RadiozRadioz
Splunk?
hazmazlaz
If you're a trillionaire then sure, absolutely :D Splunk is a great tool but oh boy is it ever expensive!