Loki: a write path, a read path and one object store

Scroll or pinch to zoom, drag to move, double-click to zoom in 100% SVG PNG Back to the post

Loki architecture: a log agent pushes streams to the distributor, which replicates them to ingesters; ingesters keep chunks in memory with a write-ahead log and flush chunks and index to object storage; dashboards send LogQL to the query frontend, which splits queries for queriers; queriers read recent logs from ingesters and older logs from object storage; the compactor merges the index and applies retention; the ruler evaluates LogQL alert rules through the queriers and sends alerts to Alertmanager.