I have 5 Kubernetes clusters, and I’m preparing to implement Loki to collect logs from all the clusters. I’m considering 3 architectures:
Install the Loki stack in a single cluster (observe cluster) and configure Promtail on the other clusters to send logs. However, I’m concerned that sending all logs from the 5 clusters to a single S3 and to the ingester of the observe cluster could introduce latencies and errors.
Install the Loki stack on each cluster, with each cluster having its own S3 storage. This architecture won’t allow me to have a global view of all clusters via a single datasources Grafana ( observe cluster) .
Install a querier on the observe cluster, which would query the S3 storage and queriers from other clusters (similar to Thanos).
Could someone help me identify the best solution? Based on your experiences, what method would you recommend?