Agent skill · software engineering · jeremylongshore
setting-up-log-aggregation
Execute use when setting up log aggregation solutions using ELK, Loki,
Why this skill is useful
Generates production-ready configurations and specific commands for deploying log aggregation solutions that the AI wouldn't reliably generate on its own.
What it needs
Requires docker, kubectl installed locally. About 3k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Setting Up Log Aggregation Overview Deploy centralized log aggregation platforms (ELK Stack, Grafana Loki, Splunk) with ingestion pipelines, structured parsing, retention policies, visualization dashboards, and alerting. Configure log shippers (Filebeat, Promtail, Fluentd) to collect from applications, containers, and system logs with proper security and scalability. Prerequisites Target infrastructure identified: Kubernetes, Docker Compose, or VMs Storage requirements calculated: estimate daily log volume and multiply by retention period Network connectivity between log sources and aggregation platform (typically ports 9200, 3100, 8088) Authentication mechanism defined (LDAP, OAuth, API tokens, or basic auth) Resource allocation planned: Elasticsearch needs significant heap memory (minimum 4GB per node) Instructions 1. Select the log aggregation platform: ELK for full-text search and complex queries, Loki for lightweight Kubernetes-native logging, Splunk for enterprise with advanced analytics 2. Deploy the storage backend: Elasticsearch cluster, Loki with object storage (S3/GCS), or Splunk indexers 3. Configure log shippers on sources: Filebeat for ELK, Promtail for Loki, Fluentd/Fluent Bit for multi-destination 4. Define parsing rules: Logstash grok patterns for unstructured logs, JSON parsing for structured logs, multiline handling for stack traces 5. Set retention policies: Index Lifecycle Management (ILM) for Elasticsearch, chunk retention for Loki, index rotation for Splunk 6. Deploy visualization: Kibana dashboards for ELK, Grafana dashboards for Loki, Splunk Search for Splunk 7. Configure alerting: define log-based alerts for error spikes, application exceptions, and security events 8. Implement RBAC: restrict dashboard access and log visibility by team and environment 9. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/setting-up-log-aggregation