简体   繁体   English

用水槽或kafka替换掉

[英]splunk replacement with flume or kafka

I need your help with one suggestion. 我需要您的建议。 In current scenario, we have one application on cloud and via splunk we have the ability to view log. 在当前情况下,我们在云上只有一个应用程序,通过splunk,我们可以查看日志。 I am thinking of implementing this using our big data tools like flume/kafka wherein I can take real time log data from cloud ( currently taken by splunk ) and made it available to our HDFS. 我正在考虑使用我们的大数据工具(例如flume / kafka)来实现这一点,其中我可以从云(当前由splunk获取)中获取实时日志数据,并将其提供给我们的HDFS。 Few concern here 这里很少关注

  1. is this feasible and make sense ? 这可行并且有意义吗?
  2. for log search (same capability like splunk ) 用于日志搜索(具有与splunk相同的功能)

which tool can we use? 我们可以使用哪种工具?

If you just want to move logs into HDFS, you can use Flume with HDFS sink. 如果只想将日志移入HDFS,则可以将Flume与HDFS接收器一起使用。
There are also few other options available like - 其他选项也很少,例如-

Logstash Logstash

You can use other framework like Elasticsearch and Kibana to have more functionality available for the logs. 您可以使用诸如ElasticsearchKibana之类的其他框架来为日志提供更多功能。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM