Operations | Monitoring | ITSM | DevOps | Cloud

Sematext

The New Version of Logagent Enriches Container Logs with Metadata and GeoIP

Logagent is a modern, open-source, light-weight data shipper with out of the box and extensible log parsing, on-disk buffering, secure transport and bulk indexing to Elasticsearch and Sematext Cloud. Its low memory footprint and low CPU overhead make it suitable for deploying on edge nodes and devices, while its ability to parse and structure logs makes it a great Logstash alternative.

Cutting-Edge Observability Tools into a Single Platform

Sematext provides a single pane of glass and machine learning powered alerts for logs, metrics, traces and user experience data. Sematext Cloud provides advanced monitoring, logging and tracing for all Docker platforms such as Docker EE, Kubernetes, GKE, AWS ECS, and IBM Cloud. Sematext’s new monitoring agent leverages the powerful eBPF Linux kernel observability functionality and uses the Kubernetes API to enrich the container and cluster level metrics.

What is an App in Sematext Cloud

Your software stack likely consists of web servers, search engines, queues, databases, etc. Each part of your stack emits its own metrics and logs. Depending on the size of your team and structure, different team members might have permissions to look at one set of data, but not the other. Some data is needed for troubleshooting and can be discarded after just a few days, while more important data might need to be kept for months for legal or capacity planning purposes.

Elasticsearch Ingest Node vs Logstash Performance

Starting from Elasticsearch 5.0, you’re able to define pipelines within it that process your data, in the same way you’d normally do it with something like Logstash. We decided to take it for a spin and see how this new functionality (called Ingest) compares with Logstash filters in both performance and functionality. Is it worth sending data directly to Elasticsearch or should we keep Logstash?

Is observability good for our brain? How about post-mortems?

Your software stack likely consists of web servers, search engines, queues, databases, etc. Each part of your stack emits its own metrics and logs. Depending on the size of your team and structure, different team members might have permissions to look at one set of data, but not the other. Some data is needed for troubleshooting and can be discarded after just a few days, while more important data might need to be kept for months for legal or capacity planning purposes.