I’ve been looking into a centralized logging solution for my home network and such. I looked into grafana+loki, but it seems very complex, and I couldn’t seem to get it working.
I don’t need anything overly fancy, I just want centralized logging and maybe metrics that I can access from a webui, preferably on the simpler side and with a decent docker(-compose) example.
You must log in or # to comment.
When it comes to observability there’s never going to be an easy solution.
Google “Application Performance Monitoring tools”. Signoz is one, for example. Combines logs, metrics, and traces. There’s also OpenObserve. I use Uptrace, but in terms of metrics visualisation it’s very barebones, just gauges basically. All of them can be setup with docker.
Loki is pretty simple so not sure what you’re expecting.
There’s always an ELK stack but I feel like that’s a lot more overhead than a grafana/loki combo… I personally never want to use this again but it’s up to you.
You just need something to collect and ship the logs (promtail, fluentbit, opentelemetry), something to store them (loki, logstash), and some way to query them (grafana, kibana, logcli).
Did you check out the Loki Docker plugin for the daemon? That worked like a charm for me.
Promtail will grab host level logs as well.
DM if you’re comfortable with Ansible; I have the whole stack (host + Docker services) automated and can share.
Graylog. Super easy to set up. Getting the grok and regex patterns sorted kind of sucks for getting fields to be pulled out unless you are good with that already.
Give OpenObserve a try, it’s able to handle a lot of traffic while using low resources. https://github.com/openobserve/openobserve
For security monitoring I’ll throw Wazuh in the room. There’s a room right recent video from John Hammond on the subject.