Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Graylog vs Fluentd

Out of available open source log management tools, I have come across these two but couldn't figure out which one to use. I tried searching articles for Graylog vs Fluentd but couldn't find.

Could someone suggest which one would be good for the following criteria,
* production master-slaves architecture with not so high end hardware, like single core processor   with 4GB RAM and decent drive size to accommodate logs
* log search via UI
* alerts based on rules
* minimal setup (if possible)
* dynamically add/remove slave hosts from VIP

Thanks in advance
Mirza

like image 781
baig62 Avatar asked Feb 12 '16 11:02

baig62


People also ask

Is FluentD better than Logstash?

FluentD and Logstash are both open source data collectors used for Kubernetes logging. Logstash is centralized while FluentD is decentralized. FluentD offers better performance than Logstash. In fact, FluentD offers many benefits over Logstash.

Why should I use Graylog?

Graylog enables IT admins to manage and analyze log data from multiple sources. Use this tutorial to set up the tool and learn its primary features, such as pipelines and extractors.

Is Graylog an elk?

Graylog is primarily for log analysis, whereas the ELK stack is mostly for big data analysis. Unlike ELK, it solely handles log data. In ELK, kibana is used for visualization; kibana must be put up separately from the others. Graylog is a complete processing and visualization system.

Does Graylog use Logstash?

Sending messages from Graylog to Logstash Fortunately, Graylog provides a plugin API. So I created a plugin which can forward log messages to a Logstash instance. This instance can write the log files then. The plugin is hosted on Github and licensed under the APL 2.0.


1 Answers

I tried searching articles for Graylog vs Fluentd but couldn't find.

Because Graylog and Fluentd are different layer tool.

Fluentd is a streaming event collector. Fluentd doesn't have a storage and visualization UI like Graylog. Graylog is a log management tool based on Elasticsearch, not event collector.

Fluentd can be a data source of Graylog so not "vs". Here is an one example Fluentd and Graylog combo: http://www.fluentd.org/guides/recipes/graylog2

like image 97
repeatedly Avatar answered Oct 23 '22 00:10

repeatedly