I have spent time studying and operating Grafana Loki in high-throughput environments, and this is the sixth and final post in my series on Loki’s architecture and design. In the first post, we covered labels and chunks. In the second post, we traced a log line’s path. In the third post, we explored the hash ring. In the fourth post, we dissected storage internals. In the fifth post, we looked at query execution and sharding. Now, we pull it all together: what changes when Loki moves from an architecture diagram to a production observability platform?

Read More

I have been studying Grafana Loki’s architecture, and this is the fifth post in the series. In the first post, we covered labels, streams, and chunks. In the second post, we traced a log line’s write path. In the third post, we explored the hash ring. In the fourth post, we examined storage internals. Now, we face the read path: how does Loki query billions of logs quickly without a full-text index?

Read More

I have been exploring how Grafana Loki manages data under the hood. In the first post, I covered labels, streams, and chunks. In the second post, we traced a log line’s path through the system. In the third post, we looked at the hash ring. Now, we face the storage layer: what exactly is stored when Loki flushes data, and how does it scale storage to petabytes of logs?

Read More

I have been studying Grafana Loki’s architecture, and this is the third post in the series. In the first post, the focus was labels, streams, and chunks. In the second post, we traced a log line’s path through the distributors and ingesters. Now, the core question is: how does Loki decide which ingester gets which log stream, and how does it scale that decision without a central coordinator?

Read More

I have been studying Grafana Loki’s write path, and this is the second post in the series. In the first post, the main idea was that Loki indexes labels, groups log lines into streams, and stores the log content in compressed chunks.

Read More

This is the first post in a series where I am studying Grafana Loki’s architecture from the ground up: why it exists, how logs move through the system, how the ring distributes work, how storage is organized, and how queries run without indexing every log line.

Read More

I have been studying how distributed systems keep track of their members, and the Gossip Protocol is one of those ideas that explains how a cluster can share information without placing a central coordinator in the middle of every decision.

Read More

I have been studying storage internals, and Write-Ahead Logging (WAL) is one of those ideas that looks simple at first but explains a lot about how databases survive crashes.

Read More