Best platform for self-hosted logs?

I tried some tools and the one that I am currently using is OpenObserve, it's light has a very good compression and is simple to manage, as an observability platform I think that open observe has some features that can be used instead of datadog like log injestion and open telemetry traces

Also using Graylog, dead simple to set up with rsyslog and at work we even use the sidecar for window logs.

Try BlackESK https://github.com/amitn322/blackesk

Splunk

Anyone else looking at openobserve. Looks OK for homelab, but not really stable

Just write your logs as files on a centralized syslog server with good file structure and you'll be good.

You may really underestimate how fast and convenient grep+less combo is in comparison to webui-based solutions.

It's a hybrid solution but I prefer putting my logs with an S3 provider, it's just cheap storage that I don't have to care about. And there are a lot of tools to do it with, like loki for example.

Another vote for graylog, runs well with opensearch instead of elastic.

I use the ELK stack (Elasticsearch, Kibana, Beats)

https://github.com/openobserve/openobserve . Built in rust - No JVM. Much lighter than the alternatives mentioned here and with extremely good UI. Beautiful dashboards. Could even run on raspberry pi.

Graylog

A simple syslog server is ready.

Look into ELK stack. I personally hate it but if you can learn it there's a chance you can build a career on it.

Anyone here got a solution working in Unraid? I looked into this recently but got a bit stuck.

Depending on your existing monitoring stack, some options might be:

• Grafana Loki
• Sentry can be self-hosted for application logging
• Logstash is self-explanatory, use with other parts of Elastic's software like Kibana for visualization.

ELK

Dozzle may be a bit basic for your needs, but it could be one tool in your toolbox.

Loki to Grafana.

Opted for loki since it allows using the same interface for multiple purposes

I like Grafana/Loki/promtail etc.

But Datalust Seq is also nice.

Graylog can do a lot but its too bloated and too hungry for my taste (damn elasticsearch).

OneUptime.com - looks like they have it on the roadmap to launch by Q4 of this year.

I come from a Cybersecurity background which might explain my answer: Security Onion had proven adept at cross referencing logs and pcaps which is pretty awesome for troubleshooting

And +1 for Dozzle to see real-time Docker logs.

For most self hosted use cases Splunk's free 500MB (per day) license should be enough. It's way easier to set up and maintain than ELK and has tons of free extensions for parsing log formats and dashboards.