Jump to contentJump to page navigation: previous page [access key p]/next page [access key n]
Applies to SUSE OpenStack Cloud Monitoring

3 Log Management

Services and servers in a cloud infrastructure generate huge amounts of log data, from simply announcing that everything is healthy to detailed information on events or processes. The logs are distributed over many physical and virtual servers. SUSE OpenStack Cloud Monitoring collects, stores, and queries these logs and makes them accessible to SUSE OpenStack Cloud Monitoring users in one central place.

SUSE OpenStack Cloud Monitoring covers all aspects of an enterprise-class log management solution:

  • Central management of log data from medium and large-size OpenStack deployments.

  • Buffered exchange of log data to provide high data throughput.

  • Logical isolation of log data through multi-tenancy.

  • Scalable architecture capable of mastering the data load from a large number of nodes in OpenStack environments. The log management solution can be horizontally and vertically adapted to constantly changing data loads.

Basic Usage Scenario

The basic usage scenario of setting up and using the log management features of SUSE OpenStack Cloud Monitoring looks as follows:


The Monitoring Service operator is responsible for providing the log management features to the OpenStack operator. He uses the features himself for retrieving log data on SUSE OpenStack Cloud Monitoring.

The OpenStack operator uses the log management features for retrieving log data on the OpenStack services and the middleware components that make up the underlying OpenStack platform.

Data Collection

A Log Agent can be installed and configured on each physical and virtual server where log data is to be retrieved. The agent is responsible for collecting the log data from the cloud resources and sending it to the Monitoring Service for further processing.

SUSE OpenStack Cloud Monitoring stores the log data in a central database. The central database forms the basis for visualizing the log data for the SUSE OpenStack Cloud Monitoring users.

Data Visualization and Analysis

SUSE OpenStack Cloud Monitoring supports advanced data visualization and analysis of the log data in a variety of charts, tables, or maps. Visualizations can easily be combined in dynamic dashboards that display changes to search queries in real time.

Based on OpenStack Horizon, the customizable dashboards are seamlessly integrated into the cloud infrastructure. They enable user access to all log management functionality.

Alarms and Notifications

GUI-based alarm and notification management is also supported for log data. SUSE OpenStack Cloud Monitoring supports a template mechanism for alarms on log data that is not limited to a single cloud resource but can analyze a scalable set of resources.

Alarms and notifications can be configured to inform system operators when the number of critical log entries exceeds a defined threshold. Compound alarms can be used to analyze more complex log events. This automation of log handling guarantees that system operators identify problems in their infrastructure early and find the root cause of these problems quickly.

Print this page