setting-up-log-aggregation

Execute use when setting up log aggregation solutions using ELK, Loki, or Splunk. Trigger with phrases like "setup log aggregation", "deploy ELK stack", "configure Loki", or "install Splunk". Generates production-ready configurations for data ingestion, processing, storage, and visualization with proper security and scalability.

跳到安装

仓库: jeremylongshore/claude-code-plugins-plus-skills
最近来源活动: 2026年7月17日 22:18
检测到的 SKILL.md 语言: 英语
星标: 2,604
分支: 378

安装方式

默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。

用 Codex 或 Claude 帮你安装复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。

直接命令不会经过审查 Prompt；运行前请先检查来源。

npx skills add https://github.com/jeremylongshore/claude-code-plugins-plus-skills --skill setting-up-log-aggregation

命令会保持在同一行。复制前请横向滚动并检查完整内容。

想先保存到本地？可下载 SkillsMP 当前能够提供的文件。

检查来源文件

决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。

文件资源管理器

13 个文件

SKILL.md

来源说明 · 只读预览

返回搜索返回安装

clerk-core-workflow-a

Implement user sign-up and sign-in flows with Clerk. Use when building authentication UI, customizing sign-in experience, or implementing OAuth social login. Trigger with phrases like "clerk sign-in", "clerk sign-up", "clerk login flow", "clerk OAuth", "clerk social login".

2026-07-23

clerk-core-workflow-b

Implement session management and middleware with Clerk. Use when managing user sessions, configuring route protection, or implementing token refresh and custom JWT templates. Trigger with phrases like "clerk session", "clerk middleware", "clerk route protection", "clerk token", "clerk JWT".

2026-07-23

clerk-enterprise-rbac

Configure enterprise SSO, role-based access control, and organization management. Use when implementing SSO integration, configuring role-based permissions, or setting up organization-level controls. Trigger with phrases like "clerk SSO", "clerk RBAC", "clerk enterprise", "clerk roles", "clerk permissions", "clerk organizations".

2026-07-23

查看这个仓库的全部 Skills

Setting Up Log Aggregation

Overview

Deploy centralized log aggregation platforms (ELK Stack, Grafana Loki, Splunk) with ingestion pipelines, structured parsing, retention policies, visualization dashboards, and alerting. Configure log shippers (Filebeat, Promtail, Fluentd) to collect from applications, containers, and system logs with proper security and scalability.

Prerequisites

Target infrastructure identified: Kubernetes, Docker Compose, or VMs

Storage requirements calculated: estimate daily log volume and multiply by retention period

Network connectivity between log sources and aggregation platform (typically ports 9200, 3100, 8088)

Authentication mechanism defined (LDAP, OAuth, API tokens, or basic auth)

Resource allocation planned: Elasticsearch needs significant heap memory (minimum 4GB per node)

Instructions

Select the log aggregation platform: ELK for full-text search and complex queries, Loki for lightweight Kubernetes-native logging, Splunk for enterprise with advanced analytics

Deploy the storage backend: Elasticsearch cluster, Loki with object storage (S3/GCS), or Splunk indexers

Configure log shippers on sources: Filebeat for ELK, Promtail for Loki, Fluentd/Fluent Bit for multi-destination

Define parsing rules: Logstash grok patterns for unstructured logs, JSON parsing for structured logs, multiline handling for stack traces

Set retention policies: Index Lifecycle Management (ILM) for Elasticsearch, chunk retention for Loki, index rotation for Splunk

Deploy visualization: Kibana dashboards for ELK, Grafana dashboards for Loki, Splunk Search for Splunk

Configure alerting: define log-based alerts for error spikes, application exceptions, and security events

Implement RBAC: restrict dashboard access and log visibility by team and environment

Test the full pipeline: generate test logs, verify ingestion, confirm parsing, and validate dashboard display

Output

Docker Compose or Kubernetes manifests for the log aggregation stack

Log shipper configuration files (Filebeat YAML, Promtail config, Fluentd conf)

Parsing and field extraction rules (Logstash pipeline, grok patterns)

Retention policy configuration (ILM, lifecycle rules)

Dashboard JSON exports for Kibana or Grafana

Alert rule definitions for error rate monitoring

Error Handling

Error

Cause

Solution

Elasticsearch heap space exhausted

JVM heap too small for index volume

Increase ES_JAVA_OPTS heap size (set to 50% of available RAM, max 32GB) or add nodes

Cannot connect to Elasticsearch

Network issue or Elasticsearch not started

Verify Elasticsearch is running and healthy; check firewall rules and bind address

Failed to create index

Disk space full or index template misconfigured

Check disk usage with df -h; review index template settings and shard allocation

Failed to parse log line

Grok pattern mismatch or unexpected log format

Test grok patterns with Kibana Grok Debugger; add fallback pattern for unmatched lines

Promtail: too many open files

System file descriptor limit too low for log tailing

Increase ulimit -n to 65536; reduce the number of watched paths

Examples

"Deploy an ELK stack on Docker Compose with Filebeat collecting Nginx and application logs, Logstash parsing with grok, and a Kibana dashboard for 5xx error monitoring."

"Set up Loki + Promtail on Kubernetes with 14-day retention, basic auth, and a Grafana dashboard showing logs per namespace."

"Configure Fluentd to ship logs from 20 application servers to both Elasticsearch (hot storage, 7 days) and S3 (cold storage, 1 year)."

Resources

name	setting-up-log-aggregation
description	Execute use when setting up log aggregation solutions using ELK, Loki, or Splunk. Trigger with phrases like "setup log aggregation", "deploy ELK stack", "configure Loki", or "install Splunk". Generates production-ready configurations for data ingestion, processing, storage, and visualization with proper security and scalability.
allowed-tools	Read, Write, Edit, Grep, Glob, Bash(docker:), Bash(kubectl:)
version	1.26.0
author	Jeremy Longshore <jeremy@intentsolutions.io>
license	MIT
tags	["devops","deployment","security","scaling"]
compatibility

name	setting-up-log-aggregation
description	Execute use when setting up log aggregation solutions using ELK, Loki, or Splunk. Trigger with phrases like "setup log aggregation", "deploy ELK stack", "configure Loki", or "install Splunk". Generates production-ready configurations for data ingestion, processing, storage, and visualization with proper security and scalability.
allowed-tools	Read, Write, Edit, Grep, Glob, Bash(docker:), Bash(kubectl:)
version	1.26.0
author	Jeremy Longshore <jeremy@intentsolutions.io>
license	MIT
tags	["devops","deployment","security","scaling"]
compatibility

setting-up-log-aggregation

来源信息

安装方式

检查来源文件

同仓库更多 Skills