Log file
lastmod 2026-03-13created 2018-10-0219 edits
In computing, a logfile is a file that records events that occur while an operating system or other software runs, or messages between the communication software of different users. The act of keeping a log is called logging.
A transaction log is a file of the communication between a system and its users, or a data collection method that automatically captures the type, content, and time of transactions made by users at terminals belonging to the system.
Many operating systems, software frameworks, and programs include a logging system. A widely used logging standard is syslog, defined in IETF RFC 5424.
Log level
- 0 (KERN_EMERG)
- The system is unusable.
- When the system can no longer be used. That is, the system is about to crash.
- 1 (KERN_ALERT)
- Actions that must be taken care of immediately.
- When a serious problem occurs that requires immediate resolution.
- 2 (KERN_CRIT)
- Critical conditions.
- A critical problem. (It does not have to be resolved immediately, but it should be resolved as soon as possible)
- 3 (KERN_ERR)
- Non-critical error conditions.
- When a non-critical but definite problem occurs. (The application may keep running. It just doesn't work properly...)
- 4 (KERN_WARNING)
- Warning conditions that should be taken care of.
- A situation the system can resolve, but which carries potential risk.
- For example, a malformed input value (such as entering 2010-1-21 when the date format is yyyy-MM-dd)
- 5 (KERN_NOTICE)
- Normal, but significant events.
- Normal. But a significant event has occurred. It is assumed that the user is notified.
- 6 (KERN_INFO)
- Informational messages that require no action.
- Additional information. No further action is needed after checking.
- 7 (KERN_DEBUG)
- Kernel debugging messages, output by the kernel if the developer enabled debugging at compile time.
- For debugging.
List of Log Aggregator
- Scribe
- Apache Flume
- Fluentd
- ELK Stack (Elasticsearch, Logstash, Kibana, Beats)
- EFK Stack (Elasticsearch, Fluentd, Kibana
- PLG Stack (Loki, Promtail, Grafana) - When you need resource savings, a Grafana-based UI, and a lightweight logging solution
- Graylog
- Fluent Bit - Lighter than Fluentd, supports various backends; when you need resource optimization
- NerdLog - Fast multi-host TUI log viewer with a timeline histogram
See also
- syslog
- Metrics Aggregations
- Log Aggregator: A system that collects logs accumulated on multiple machines so they can be analyzed all at once.
- angle-grinder - A viewer that can parse, aggregate, sum, average, min/max, and sort logs in real time - lets you do sophisticated analysis simply when you don't have graphite/kibana/honeycomb/splunk, etc.
- LogFX - Multi-platform open-source log viewer
- Rsyslog
- tailspin - Log file highlighter
- LogLayer - A unified logger that runs on top of multiple Javascript logging libraries
- microlog - Logging library for embedded and desktop applications
- cockpit - Cockpit is a web-based graphical interface for servers
- systemd-journal-remote (systemd-journal-gatewayd)
Favorite site
- Wikipedia (en) Log file
- Linux Kernel Configuration - loglevel
- [Recommended] Github - kubernetes/kubernetes - Kubernetes logging, journalD, fluentD, and Splunk, oh my! #24677 (active discussion on logging in kubernetes)