4 ms·
Parsing logs has a performance ceiling that locks you out of ~most of the value that good observability systems should be delivering.
by sagichmal 5y ago
Parsing logs has a performance ceiling that locks you out of ~most of the value that good observability systems should be delivering.
- enobrev 5y agoI've been finding that vector.dev keeps up well. Before I moved to containers, I was using rsyslog, which also kept up incredibly well. I've had both set up to pour directly into elasticsearch, which, if tuned, can keep up as well.