loki
Grafana Loki — the log aggregation backend. Receives logs from the
vector DaemonSet (the canonical shipper) and serves Grafana for
queries.
Identity
| Field | Value |
|---|---|
| Service id | loki |
| Role | observability |
| Image | grafana/loki:3.3.2 |
| Port | 3100 |
| Health | /ready |
Deployment surfaces
| Surface | Where |
|---|---|
| Compose | service loki in alphaswarm_platform/compose/docker-compose.platform.yml (platform overlay) |
| Kustomize | observability/loki/ — single-binary StatefulSet (in-cell); split-monolithic mode in cloud cells |
Dependencies
Upstream: vector (the canonical shipper).
Downstream: grafana (datasource).
Operations
- Storage: in-cell uses local PVC; cloud cells back with S3 / GCS / ADLS object storage.
- Retention: 14 days default; 30 days for
audit-*streams (per the audit-evidence retention policy). - Tenancy: every log line carries a
tenant_idlabel so Loki's multi-tenancy split is enforced at query time.
See also
vector.md— log shipper.grafana.md— visualization layer.