Slide 9 of 10

Logs key takeaways

Key takeaways

  • Cloud logs include application, platform, audit, network, and service records.
  • You have several collection methods:
    • Firehose (AWS): managed streaming for most high-volume CloudWatch logs.
    • Lambda Promtail (AWS): for the specific types Firehose doesn’t support, like ALB, CloudFront, and CloudTrail. It can also filter logs before forwarding.
    • Functions (Azure): event-driven collection from Event Hub.
    • Grafana Alloy: flexible processing on Azure, and the collection path for GCP via Pub/Sub.
  • Choose the collection method based on log volume, the specific log types you need, and your cloud provider.

Script

Cloud logs include application, platform, audit, network, and service records. For AWS, use Firehose for most high-volume CloudWatch logs and Lambda Promtail for the types Firehose doesn’t support. For Azure, use Functions or Grafana Alloy. For GCP, use Alloy subscribed to Pub/Sub. Choose based on log volume, the log types you need, and your cloud provider.
Previous Next