Update README.md
Costa Tsaousis committed
Mar 17, 2024 at 23:07 UTC
f05f47bcbdfe012a630fd39f1a9b6878ec89c1c8
1 file changed
+47
docs/observability-centralization-points/logs-centralization-points-with-systemd-journald/README.md
+47
@@ -1,5 +1,52 @@
1
# Logs Centralization Points with systemd-journald
2
3
+```mermaid
4
+stateDiagram-v2
5
+ classDef userFeature fill:#f00,color:white,font-weight:bold,stroke-width:2px,stroke:yellow
6
+ classDef usedByNC fill:#090,color:white,font-weight:bold,stroke-width:2px,stroke:yellow
7
+ classDef thirdparty fill:#333,color:#aaa,font-weight:normal,stroke-width:1px,stroke:#fff
8
+
9
+ logsQuery:::usedByNC
10
+ logsDashboard:::userFeature
11
+ journald:::thirdparty
12
+ journalRemote:::thirdparty
13
+ journalUpload:::thirdparty
14
+ journalFiles:::thirdparty
15
+ logSources:::thirdparty
16
+ textFiles:::thirdparty
17
+
18
+ journalRemote: systemd-journal-remote
19
+ journalUpload: systemd-journal-upload
20
+ journalFiles: Store
21
+ journalFiles: systemd-journal files
22
+ journald: systemd-journald
23
+ logSources: Local Logs Sources
24
+ log2journal:log2journal
25
+ log2journal:Convert text, json, logfmt files
26
+ log2journal:to structured journal entries.
27
+ logsDashboard: Netdata Dashboards
28
+ logsQuery: Query Journal Files
29
+ textFiles: Text Log Files
30
+
31
+ logSources --> journald: journald API
32
+ logSources --> textFiles: write to log files
33
+ textFiles --> log2journal: tail log files
34
+ log2journal --> journald: journald API
35
+ journald --> journalFiles
36
+
37
+ journalFiles --> Netdata
38
+ journalFiles --> journalUpload
39
+
40
+ journalRemote -->journalFiles
41
+ journalUpload --> [*]: to a remote journald
42
+ [*] --> journalRemote: from a remote journald
43
+
44
+ state Netdata {
45
+ [*]-->logsQuery
46
+ logsQuery --> logsDashboard
47
+ }
48
+```
49
+
50
Logs centralization points can be built using the `systemd-journald` methodologies, by configuring `systemd-journal-remote` (on the centralization point) and `systemd-journal-upload` (on the production system).
51
52
The logs centralization points and the metrics centralization points do not need to be the same. For clarity and simplicity however, when not otherwise required for operational or regulatory reasons, we recommend to have unified centralization points for both metrics and logs.