##### ###### ##### ### # # ### # # ###### ## ## ## ## ## ## ## # # # # # ## ##### #### ##### # # # # # # # #### ## # ## ## ## ## # # # # # ## ## # ###### ## ### # ### # ######
##### ###### ##### ### # # ### # # ###### ## ## ## ## ## ## ## # # # # # ## ##### #### ##### # # # # # # # #### ## # ## ## ## ## # # # # # ## ## # ###### ## ### # ### # ######
Centralized logging: collect logs from all services, store searchably, alert on patterns. Scale: M+ events/second, + TB/day, retain days.
Components: log shippers (Filebeat), message queue (Kafka), processor (Logstash), storage (Elasticsearch), UI (Kibana). The ELK stack. Key challenges: ingestion throughput, storage cost, query performance.
