---
title: Loki + Fluent Bit (Logging Stack)
category: systems
tags: [loki, fluent-bit, logging, observability]
created: "2026-07-24"
modified: "2026-07-24"
---

# Loki + Fluent Bit (Logging Stack)

## Loki
- **Namespace:** logging (K8s)
- **External Service:** `loki-external`, LoadBalancer `10.0.30.207:3100`
- **Caches:** memcached (results-cache, `-m 512 -I 2m`, requests 256Mi/limits 512Mi)

## Fluent Bit v5.0.9

### Coverage
| Target | How | Status |
|--------|-----|--------|
| 9 PVE Hosts | `install-host.sh` auf VM200 | ✅ aktiv |
| 20 LXC Containers | `install-lxc.sh` | ✅ aktiv (außer CT110 stopped) |
| 5 QEMU VMs | `qm guest exec` | ✅ aktiv (VM300/301/302/310/311) |
| 6 K8s Nodes | K8s DaemonSet | ✅ aktiv |
| VM200 | bereits vorhanden | ✅ aktiv |

### Inputs (Proxmox Hosts)
- systemd journal (pve*, corosync, pacemaker, ceph, zfs, smartd)
- auth.log
- pveproxy/access.log
- pvedaemon.log
- cluster.log
- **PVE Tasks** (`/var/log/pve/tasks/index`) — UPID-Format
- **Ceph Audit** (`/var/log/ceph/ceph.audit.log`) — JSON

### Scripts
- `logging/fluent-bit-proxmox/` im iac-homelab Repo

## Query
```bash
logcli query --addr http://10.0.30.207:3100 'job=fluent-bit-proxmox'
```

## Related
- [[systems/proxmox-cluster]]
- [[systems/monitoring]]
- [[systems/rke2-kubernetes]]