promtail

Sun, 14 Dec 2025 00:00:00 +0000

 graph TB
 subgraph ec4mrjp5
 B13[sshd] -- log --> A13[promtail]
 B12[selinux] -- log --> A13
 B11[nginx] -- log --> A13
 end
 A13 <-- https --> A7[loki]
 subgraph m7jrgve9
 B23[sshd] -- log --> A23[promtail]
 B22[selinux] -- log --> A23
 B21[nginx] -- log --> A23
 end
 A23 <-- https --> A7[loki]
 subgraph gvp6nx1a
 B33[sshd] -- log --> A33[promtail]
 B32[selinux] -- log --> A33
 B31[nginx] -- log --> A33
 A33 <-- http --> A7[loki]
 end

container 구성

.env

vi /opt/promtail/.env

LOKI_URL=http://loki:3100/loki/api/v1/push
LOKI_USERNAME=dev
LOKI_PASSWORD=a***************************************************************

docker-compose.yml

vi /opt/promtail/docker-compose.yml

services:
 promtail:
 image: grafana/promtail:latest
 container_name: promtail
 networks:
 - dev
 ports:
 - 9080/tcp
 user: 0:0
 environment:
 - LOKI_URL=$LOKI_URL
 - LOKI_USERNAME=$LOKI_USERNAME
 - LOKI_PASSWORD=$LOKI_PASSWORD
 - TZ=Asia/Seoul
 volumes:
 - /var/log/secure:/var/log/secure:ro
 - /var/log/audit/audit.log:/var/log/audit/audit.log:ro
 - /opt/promtail/config:/etc/promtail:ro
 - /opt/nginx/log:/var/log/nginx:ro
 command:
 - --config.file=/etc/promtail/config.yml
 - --config.expand-env=true
 restart: unless-stopped
networks:
 dev:
 external: true

config.yml

수집할 로그 구성

promtail on 대충어쩌고저쩌고샬라샬라

promtail

container 구성

.env

docker-compose.yml

config.yml