Agent skill · operations · aj-geddes
log-aggregation
Implement centralized logging with ELK Stack, Loki, or Splunk for log collection, parsing, storage, and analysis across infrastructure.
Why this skill is useful
Provides specific configurations and deployment scripts for ELK Stack and Loki that enhance centralized logging capabilities.
What it needs
Requires docker installed locally. About 1k tokens when loaded. Last updated 2026-03-04. 307 stars on the source repository.
What this skill does
Log Aggregation Table of Contents Overview When to Use Quick Start Reference Guides Best Practices Overview Build comprehensive log aggregation systems to collect, parse, and analyze logs from multiple sources, enabling centralized monitoring, debugging, and compliance auditing. When to Use Centralized log collection Distributed system debugging Compliance and audit logging Security event monitoring Application performance analysis Error tracking and alerting Historical log retention Real-time log searching Quick Start Minimal working example: Reference Guides Detailed implementations in the references/ directory: Guide Contents --- --- ELK Stack Configuration ELK Stack Configuration Logstash Pipeline Configuration Logstash Pipeline Configuration Filebeat Configuration Filebeat Configuration Kibana Dashboard and Alerts Kibana Dashboard and Alerts Loki Configuration (Kubernetes) Loki Configuration (Kubernetes) Log Aggregation Deployment Script Log Aggregation Deployment Script Best Practices ✅ DO Parse and structure log data Use appropriate log levels Add contextual information Implement log retention policies Set up log-based alerting Index important fields Use consistent timestamp formats Implement access controls ❌ DON'T Store sensitive data in logs Log at DEBUG level in production Send raw unstructured logs Ignore storage costs Skip log parsing Lack monitoring of log systems Store logs forever Log PII without encryption
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aj-geddes/log-aggregation