K
K
kc412018-10-26 21:00:30
Python
kc41, 2018-10-26 21:00:30

Which way to deliver structured logs from a Python application to ELK should I choose?

There is a task of sending structured logs from several Python applications running in Docker containers. Some of them work on asyncio. At the moment I see 2 options:

  1. Use Logstash handler
  2. Use file handler and Filebeat

Which of these options is more reliable in operation?

Answer the question

In order to leave comments, you need to log in

1 answer(s)
O
OnYourLips, 2018-10-26
@OnYourLips

Third option: docker input to Filebeat
The docker processes themselves should not be logging, this is not their responsibility.
Reasons:
1. Single responsibility principle of docker containers from best practice
2. Eleventh rule 12 factor app.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question