Tag: logging

Loki vs ELK: Centralized Logging Without the RAM Tax

ELK does everything and wants all your memory. Loki does logging the Prometheus way — label indexes, not content — and runs on a fraction of the resources. Here's the honest comparison.

Logrotate & Compression

logrotate keeps your /var/log from eating the disk — configure rotation schedules, compression, and retention for any service log.

When systemd swallows your service logs

Service restart not showing logs? systemd hides stdout. Learn journalctl, systemctl status, and debugging workflows for silent systemd failures.

Log Rotation for Self-Hosted Apps

Your app is logging to a single file. It's 50GB now. Here's how to rotate logs before your disk dies.

Docker Logging: From "Where Did My Logs Go?" to Centralized Bliss

Learn Docker logging from basics to centralized stacks. Master docker logs, logging drivers, log rotation, Loki+Grafana, and Fluentd setup with practical examples.

Auditd & Audit Logging: Know Exactly Who Touched What on Your Server

Master auditd for Linux audit logging: watch critical files, audit syscalls, use aureport and ausearch, and ship logs to Loki or Elasticsearch for compliance and security monitoring.

Linux Audit Log: What's Really Happening on Your Server

auditd logs every system call, file access, and command. Learn ausearch, aureport, and writing audit rules.

awk for Log Parsing: 5 Patterns You'll Actually Use

awk is perfect for parsing logs. Here are 5 patterns that handle filtering, summing, counting, splitting fields, and pretty-printing without reaching for Perl or Python.

journalctl Queries Every Sysadmin Needs

Essential journalctl commands: -u, -f, --since, -p, -k, -b, --no-pager, JSON output. The queries you need on a broken server at 2 AM.

Why Your Docker Logs Are Eating Your Disk

Docker's default JSON logging driver writes unbounded logs to disk. Learn how to set log rotation and reclaim your storage.

Optimize Ubuntu Logs: btmp Log Rotation

btmp logs failed logins and grows forever on internet-facing servers. Set up logrotate to keep it under control before your disk fills up.

SumGuy’s Guide to Linux Log Analysis

journalctl, grep, awk, and tail -f — read your Linux logs like a pro and find the error before it pages you at 3 AM.