Deploys ELK Stack, Grafana Loki, or Splunk for centralized log aggregation with shippers, parsing rules, retention policies, dashboards, alerting, and RBAC on Docker or Kubernetes.
npx claudepluginhub jeremylongshore/claude-code-plugins-plus-skills --plugin log-aggregation-setupThis skill is limited to using the following tools:
Deploy centralized log aggregation platforms (ELK Stack, Grafana Loki, Splunk) with ingestion pipelines, structured parsing, retention policies, visualization dashboards, and alerting. Configure log shippers (Filebeat, Promtail, Fluentd) to collect from applications, containers, and system logs with proper security and scalability.
Implements centralized log aggregation with ELK Stack, Loki, or Splunk for collecting, parsing, storing, and analyzing logs across infrastructure. Useful for monitoring, debugging, and compliance.
Configures centralized log aggregation with Loki/Promtail or ELK stack, including parsing, label extraction, retention policies, and metrics correlation for multi-service troubleshooting.
References Grafana Loki LogQL syntax for log/metric queries, parsers (json/logfmt/pattern/regexp/unpack), label filters, architecture, and ingestion via Promtail/Alloy/Fluent Bit. For writing queries, configuring pipelines, troubleshooting logs.
Share bugs, ideas, or general feedback.
Deploy centralized log aggregation platforms (ELK Stack, Grafana Loki, Splunk) with ingestion pipelines, structured parsing, retention policies, visualization dashboards, and alerting. Configure log shippers (Filebeat, Promtail, Fluentd) to collect from applications, containers, and system logs with proper security and scalability.
| Error | Cause | Solution |
|---|---|---|
Elasticsearch heap space exhausted | JVM heap too small for index volume | Increase ES_JAVA_OPTS heap size (set to 50% of available RAM, max 32GB) or add nodes |
Cannot connect to Elasticsearch | Network issue or Elasticsearch not started | Verify Elasticsearch is running and healthy; check firewall rules and bind address |
Failed to create index | Disk space full or index template misconfigured | Check disk usage with df -h; review index template settings and shard allocation |
Failed to parse log line | Grok pattern mismatch or unexpected log format | Test grok patterns with Kibana Grok Debugger; add fallback pattern for unmatched lines |
Promtail: too many open files | System file descriptor limit too low for log tailing | Increase ulimit -n to 65536; reduce the number of watched paths |