Centralized Logging Patterns
summary
Demonstrates four concrete logging patterns: line-parsing with grok and multiline rules (fixed a 20-iteration demo that emitted 42 then 40 events after multiline tuning), direct appenders to Logstash (risking lost events when Logback hits a 200 MB buffer), structured JSON files ingested by Filebeat (avoids regex parsing and enables a stack trace hash for grouping), and container/orchestrator tips (daemonset sidecars, registry file inode offsets, per-namespace daily indices and a 30-day retention example).
AI-written summary · about
chapters (13)
- 0:00Intro
- 0:20Logging Patterns
- 10:00Parse
- 13:50Croc
- 24:35Stack trace hash
- 25:54Containerization
- 27:38Auto discovers
- 31:37Metadata
- 34:21Hints
- 36:26Parsing
- 40:55Getting metadata
- 41:39Indexing
- 46:51Summary
