The Graylog Extended Log Format (GELF) is a log format that avoids the shortcomings of classic plain syslog:

• Limited to length of 1024 bytes. Inadequate space for payloads like backtraces.
• No data types in structured syslog. Numbers and strings are indistinguishable.
• The RFCs are strict enough, but there are so many syslog dialects out there that you cannot possibly parse all of them.
• No compression.

Syslog is sufficient for logging system messages of machines or network gear, while GELF is a strong choice for logging from within applications. There are libraries and appenders for many programming languages and logging frameworks, so it is easy to implement. GELF can send every exception as a log message to your Graylog cluster without complications from timeouts, connection problems, or anything that may break your application from within your logging class because GELF can be sent via UDP.

!(Graylog GELF)(https://go2docs.graylog.org/current/resources/images/logo.png)

ARA Records Ansible (github/ansible-community/ara) and makes it easier to understand and troubleshoot.

It’s another recursive acronym.
What it does

Simple to install and get started, ara provides reporting by saving detailed and granular results of ansible and ansible-playbook commands wherever you run them:

• by hand or from a script
• from a laptop, a desktop, a container or a server
• for development, CI or production
• from a linux distribution or even on OS X (as long as you have python >= 3.5)
• from tools such as AWX or Tower, Jenkins, GitLab CI, Rundeck, Zuul, Molecule, ansible-pull, ansible-test or ansible-runner

Kubernetes has become the de-facto industry standard for container orchestration. It provides the required abstraction for efficiently managing large-scale containerized applications with declarative configurations, an easy deployment mechanism, and both scaling and self-healing capabilities.

As with any system, logs help engineers gain observability into containers and the Kubernetes clusters they’re running on and the key role they play is evident in a lot of incidents featuring Kubernetes failures. Yet Kubernetes poses a set of unique logging challenges.

DNS servers optionally log queries on demand by formatting a message and storing that in a file, sending it through syslog, etc. This is an I/O-intensive operation which can dramatically slow down busy servers, and the biggest issue is we get the query but not the associated response.

Fluent Bit is an open source and multi-platform Log Processor and Forwarder which allows you to collect data/logs from different sources, unify and send them to multiple destinations. It's fully compatible with Docker and Kubernetes environments.

Fluent Bit is written in C, have a pluggable architecture supporting around 30 extensions. It's fast and lightweight and provide the required security for network operations through TLS.

The following configuration reads the Windows EventLog and sends it to the Graylog2 server in GELF format.

In concept nxlog is similar to syslog-ng or rsyslog but it is not limited to unix and syslog only. It supports different platforms, log sources and formats so nxlog can be an ideal choice to implement a centralized logging system.

Centralize your Windows, Unix, Linux, BSD, Android and application logs on Windows, Unix, Linux, BSD, Android.

Graylog is a fully integrated platform for collecting, indexing, and analyzing both structured and unstructured data from almost any source. Non Graylog-authored components Include MongoDB for metadata and Elasticsearch for log file storage and text search.

Logs are a mess. Too many formats, no common timestamps, and too many amazing one-liner scripts to process them. Ugh! There's hope! Logstash and other tools are here to help. This talk will cover common logging practices (good and bad), some tools you might want to learn about later, as well as an overview of logstash and how you can use it to achieve victory in the battle against log abuse!

Centralize all your log messages

• Collect terabytes of log messages
• Process in real-time
• Search and analyze in seconds

"logging: logstash and other things" by Jordan Sissel, czar of logging at DreamHost. From PuppetConf '12. Learn more about Puppet: http://bit.ly/OUeBLk

Kibana is an open source (Apache Licensed), browser based analytics and search dashboard for ElasticSearch. Kibana is a snap to setup and start using. Written entirely in HTML and Javascript it requires only a plain webserver, Kibana requires no fancy server side components. Kibana strives to be easy to get started with, while also being flexible and powerful, just like Elasticsearch.

logstash is a tool for managing events and logs. You can use it to collect logs, parse them, and store them for later use (like, for searching). Speaking of searching, logstash comes with a web interface for searching and drilling into all of your logs.

It is fully free and fully open source. The license is Apache 2.0, meaning you are pretty much free to use it however you want in whatever way.

logstash is now a part of the Elasticsearch family! This allows us to build better software much faster as well as offering production support