Promtail

Linux

Windows

Promtail is used to read in log files and transfer them to Loki. Any log files can be imported into the VIMON in this way.
The time reference is thus retained in Loki and individual log messages can be assigned to specific anomalies in the VIMON interface

In addition to log file scraping, Promtail can also act as an RSyslog server.

Configuration

The configuration is stored in vimon/config/promtail/promtail.yml.
The central (Loki) server to which the data is to be transferred is specified there.

The scrapes are also configured here.

Syslog server

Promtail can open a Port to which syslog or other remote log components transfer their data. As an example, this could be set as follows:

  - job_name: "syslog"
    pipeline_stages: null
    relabel_configs:
    - source_labels:
      - __syslog_message_hostname
      target_label: host
    syslog:
      labels:
        host: "prod-1.vimon-dev.virtimo.net"
        job: "syslog"
      listen_address: 127.0.0.1:1514

Scrape jobs

Promtail is generally configured via jobs, in which targets (log files) and pipelines (parser) are then defined.

Examples for Karaf, Elasticsearch and INUBIT can be found in the default configuration.

Further pipelines are collected as templates at Promtail Pipelines.

Data storage

Promtail itself does not store any data permanently.

Only the position of the scraping is stored at vimon/data/promtail/promtail_positions.yml in order to continue at the correct position in the log files after a restart.