View a markdown version of this page

Log Analytics with Open Source Patterns - Log Analytics with Open Source Patterns

Log Analytics with Open Source Patterns

Publication date: December 13, 2022 (Diagram history)

This architecture uses FluentBit and Data Prepper to collect, aggregate, and transform logs into OpenSearch.

Log Analytics with Open Source Patterns

Architecture diagram showing log analytics with open source patterns by using FluentBit and Data Prepper.
  1. The application, container system, and associated services generate logs. These include Docker containers, Kubernetes pods, Amazon Elastic Compute Cloud instances, Elastic Load Balancer logs, AWS Lambda, and relational database systems.

  2. FluentBit, a popular Apache-licensed log forwarder, reads the log files and forwards them to Data Prepper over HTTP.

  3. Data Prepper is a server-side data collector. It filters, enriches, transforms, normalizes, and aggregates data for downstream analytics. Data Prepper receives the logs, buffers them, then optionally structures the data through a grok prepper.

  4. Data Prepper creates the service map and assembles the traces into trace groups. It then sends the log lines, formatted for easy searching and analysis, to https://docs.aws.amazon.com/opensearch-service/latest/developerguide/what-is.html.

  5. The user logs into OpenSearch Dashboards (or another open source visualization tool like Grafana) to perform interactive log analytics.

Further reading

For additional information, refer to

Diagram history

To be notified about updates to this reference architecture diagram, subscribe to the RSS feed.

ChangeDescriptionDate

Initial publication

Reference architecture diagram first published.

December 13, 2022

Note

To subscribe to RSS updates, you must have an RSS plugin enabled for the browser you are using.