Logs from jounald are not sent to grafana loki

Hi,

i am trying to use alloy to sent the systemd jounal logs to the grafana cloud stack.
However nothing is sent and i currently cannot find issue. Here the relevant config part from alloy. Perhaps one of you can give me hint?

loki.write "grafana_cloud_loki" {
  endpoint {
    url = "{{ vault_grafana_cloud_url}}"

    basic_auth {
      username = "{{ vault_grafana_cloud_loki_user }}"
      password = "{{ vault_grafana_cloud_loki_passwd }}"
    }
  }
}

loki.source.journal "logs_integrations_integrations_node_exporter_journal_scrape" {
  max_age       = "24h0m0s"
  relabel_rules = discovery.relabel.logs_integrations_integrations_node_exporter_journal_scrape.rules
  forward_to    = [loki.write.grafana_cloud_loki.receiver]
}

discovery.relabel "logs_integrations_integrations_node_exporter_journal_scrape" {
  targets
  rule {
    source_labels = ["__journal__systemd_unit"]
    target_label  = "unit"

  rule {
    source_labels = ["__journal__boot_id"]
    target_label  = "boot_id"

  rule {
    source_labels = ["__journal__transport"]
    target_label  = "transport"

  rule {
    source_labels = ["__journal_priority_keyword"]
    target_label  = "level"
  }
}

Same issue here, resolved by adding the relevant labels to loki.source.journal (same way grafana-agent did):


loki.source.journal "logs_integrations_integrations_node_exporter_journal_scrape" {
  max_age       = "24h0m0s"
  relabel_rules = discovery.relabel.logs_integrations_integrations_node_exporter_journal_scrape.rules
  forward_to    = [loki.write.grafana_cloud_loki.receiver]
  labels            = {
    instance  = "my.wonderful.instance.name",
    job       = "integrations/node_exporter",
  }
}

Same issue here, fixed by adding relevant labels to loki.source.journal, the same way grafana-agent did:

loki.source.journal "logs_integrations_integrations_node_exporter_journal_scrape" {
  max_age       = "24h0m0s"
  relabel_rules = discovery.relabel.logs_integrations_integrations_node_exporter_journal_scrape.rules
  forward_to    = [loki.write.grafana_cloud_loki.receiver]
  labels        = {
    instance  = "my.wonderbar.instance.name",
    job       = "integrations/node_exporter",
  }
}

Don’t see anything obviously wrong, do you see any error message in journal log for alloy?

1 Like