Centralized logging (EFK stack) in Kubernetes - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does the EFK stack stand for in centralized logging?

EFK stands for Elasticsearch, Fluentd, and Kibana. These tools work together to collect, store, and visualize logs from multiple sources.

beginner

What role does Fluentd play in the EFK stack?

Fluentd collects logs from various sources, processes them, and forwards them to Elasticsearch for storage and indexing.

beginner

Why is Elasticsearch important in the EFK stack?

Elasticsearch stores and indexes logs so they can be quickly searched and analyzed. It acts like a powerful log database.

beginner

What is the purpose of Kibana in the EFK stack?

Kibana provides a user-friendly web interface to visualize and explore logs stored in Elasticsearch. It helps users understand log data through charts and dashboards.

intermediate

How does centralized logging with EFK help in Kubernetes environments?

It gathers logs from all containers and nodes in one place, making it easier to monitor, troubleshoot, and analyze system behavior without checking each pod individually.

Which component in the EFK stack is responsible for storing and indexing logs?

A Elasticsearch

B Fluentd

C Kibana

D Prometheus

Elasticsearch stores and indexes logs, making them searchable.

What is Fluentd's main function in the EFK stack?

A Manage Kubernetes pods

B Visualize logs

C Store logs

D Collect and forward logs

Fluentd collects logs from sources and forwards them to Elasticsearch.

Which tool provides dashboards and charts to explore logs in the EFK stack?

A Elasticsearch

B Fluentd

C Kibana

D Grafana

Kibana offers a web interface for visualizing logs stored in Elasticsearch.

Why is centralized logging useful in Kubernetes?

A It replaces container logs

B It collects logs from all pods in one place

C It scales pods automatically

D It manages network policies

Centralized logging gathers logs from all pods and nodes for easier monitoring.

Which of these is NOT part of the EFK stack?

A Prometheus

B Fluentd

C Kibana

D Elasticsearch

Prometheus is for metrics monitoring, not part of the EFK logging stack.

Explain how the EFK stack components work together to provide centralized logging in Kubernetes.

Think about the flow from log collection to visualization.

Describe the benefits of using centralized logging with the EFK stack in a Kubernetes cluster.

Consider how logs are managed without EFK.