Skip to content
This repository has been archived by the owner. It is now read-only.
Browse files
AMBARI-23456. Add cloud mode documentation (#66)
  • Loading branch information
oleewere committed Jan 4, 2019
1 parent fc0edf5 commit 11be528073181bf9b1c0fffcea723b2b53e8ed19
Showing 1 changed file with 22 additions and 2 deletions.
@@ -15,6 +15,26 @@ See the License for the specific language governing permissions and
limitations under the License.

### Log Feeder: cloud mode
### Log Feeder: Cloud Mode

Log Feeder is responsible to ship logs to any data storage. In Log Search case, it is a search engine (Solr), and that can be used by Log Search server to visualize logs.
Although there is a way to send logs to cloud storage / HDFS as well, of course in that case Solr is not used, so you won't be able to visualize the data. Log Feeder has 3 main modes:

- `DEFAULT`: logs are shipped to Solr (or whatever is configured as output)
- `CLOUD`: logs are shipped to Cloud storage or HDFS (logs as text files, or in json format)
- `HYBRID`: logs are shipped to Solr and Cloud storage (or HDFS) as well (parallel mode)

The cloud mode can be set by `` property in ``.

#### How it works ?

In cloud mode, instead of shipping monitored logs to a specific location (directly) like into Solr, first it will ship the all monitored logs to new files to a temporal folder. Those logs are archived periodically, (you can check the configuration options about the log rollover in []( with `*` prefixes) and in every minutes, there is a background thread that will try to upload those archived logs to HDFS or cloud storage.

HDFS client is responsible to do the upload and you can provide a `core-site.xml` on the classpath (the HDFS client can be configured to use different filesystems like s3a,wasb,gcs etc.), but if you do not have any `core-site.xml` on the classpath, you can provide `fs.*` properties in `` configuration.

It is common, on specific clusters, there are both HDFS and cloud storage are used, so it is not valid to use the same filesystem that `core-site.xml` uses, that is why we need an option to override the filesystem valide (`fs.defaultFS`), that property is `` (e.g.: `s3a://mybucket/my/path`)

Overall - as a minimum - it is enough to provide this 2 properties to enable cloud storage mode:

- ``: CLOUD
- ``: s3a://mybucket/apps/logsearch

0 comments on commit 11be528

Please sign in to comment.