configure-log-aggregation

Implement centralized log collection, parsing, and querying with Loki/Promtail or ELK stack for operational visibility.

Select between Loki (Prometheus-style) or ELK (Elasticsearch-based) based on requirements.

For this guide, we'll focus on Loki + Promtail (recommended for most modern setups).

Set up centralized log aggregation with Loki and Promtail (or ELK stack), including log parsing, label extraction, retention policies, and integration with metrics for correlation. Use when consolidating logs from multiple services into a searchable system, replacing local log files with centralized queryable storage, correlating logs with metrics and traces, implementing structured logging with label extraction, or troubleshooting production incidents requiring cross-service log analysis. Source: pjt222/development-guides.