Agent: Grafana Alloy

# descargamos paquete
wget https://github.com/grafana/alloy/releases/download/v1.4.1/alloy-1.4.1-1.amd64.deb
# instalamos el paquete descargado
sudo dpkg -i alloy-1.4.1-1.amd64.deb

sudo systemctl edit alloy.service

[Service]
User=root

sudo systemctl daemon-reload

sudo systemctl restart alloy.service

logging {
  level  = "warn"
  format = "logfmt"
}

livedebugging {
  enabled = true
}

prometheus.exporter.self "alloy" {}

prometheus.scrape "alloy" {
	targets    = prometheus.exporter.self.alloy.targets
	forward_to = [prometheus.remote_write.mimir.receiver]
}

discovery.docker "containers" {
  host = "unix:///var/run/docker.sock"
}

prometheus.scrape "containers_scraper" {
  targets    = discovery.docker.containers.targets
	forward_to = [prometheus.remote_write.mimir.receiver]
}

prometheus.exporter.cadvisor "cadvisor_export" {
  docker_host = "unix:///var/run/docker.sock"

  storage_duration = "1m"
}

// Configure a prometheus.scrape component to collect cadvisor metrics.
prometheus.scrape "cadvisor_scraper" {
  targets    = prometheus.exporter.cadvisor.cadvisor_export.targets
  forward_to = [ prometheus.remote_write.mimir.receiver ]
}

prometheus.exporter.unix "linux_exporter" { }

// Configure a prometheus.scrape component to collect unix metrics.
prometheus.scrape "linux_scraper" {
  targets    = prometheus.exporter.unix.linux_exporter.targets
  forward_to = [prometheus.remote_write.mimir.receiver]
}

discovery.relabel "logs_default_syslog" {
	targets = []

	rule {
		source_labels = ["__syslog_message_hostname"]
		target_label  = "instance"
    replacement   = "k5"
	}

	rule {
		source_labels = ["__syslog_message_severity"]
		target_label  = "level"
	}

	rule {
		source_labels = ["__syslog_message_app_name"]
		target_label  = "application"
	}

	rule {
		source_labels = ["__syslog_message_facility"]
		target_label  = "facility"
	}
}

loki.relabel "journal_relabel" {
  forward_to = []

  rule {
    source_labels = ["__journal__systemd_unit"]
    target_label  = "unit"
  }
}

loki.source.journal "journal_source"  {
  forward_to = [loki.write.logs_default.receiver]
  relabel_rules = loki.relabel.journal_relabel.rules
  labels        = {component = "loki.source.journal"}
}

loki.source.syslog "logs_default_syslog" {
	listener {
		address      = "127.0.0.1:1514"
		protocol     = "udp"
		idle_timeout = "60s"
		labels       = {
			job = "syslog",
		}
		max_message_length = 8192
	}
  // forward_to = [loki.write.logs_default.receiver]
  forward_to = [loki.process.logs_default_syslog.receiver]
	relabel_rules = discovery.relabel.logs_default_syslog.rules
}

loki.process "logs_default_syslog" {
  forward_to = [loki.write.logs_default.receiver]

  stage.drop {
    older_than = "24h"
    drop_counter_reason = "too old"
  }

  stage.drop {
    longer_than         = "8KB"
    drop_counter_reason = "too long"
  }
}

discovery.docker "logs_default_docker" {
	host = "unix:///var/run/docker.sock"
}


loki.process "logs_default_docker" {
	forward_to = [loki.write.logs_default.receiver]

  stage.drop {
    older_than = "24h"
    drop_counter_reason = "too old"
  }

  stage.drop {
    longer_than         = "8KB"
    drop_counter_reason = "too long"
  }

	stage.match {
		selector = "{container_name=\"emqx\"}"

		stage.json {
			expressions = {
				level = "level",
			}
		}

		stage.labels {
			values = {
				level = null,
			}
		}
	}

	stage.match {
		selector = "{container_name=\"hasura\"}"

		stage.json {
			expressions = {
				level = "level",
			}
		}

		stage.labels {
			values = {
				level = null,
			}
		}
	}

	stage.match {
		selector = "{container_name=\"influx2\"}"

		stage.regex {
			expression = "lvl=(?P<level>\\w+)"
		}

		stage.labels {
			values = {
				level = null,
			}
		}
	}
}

discovery.relabel "logs_default_docker" {
	targets = []

	rule {
		source_labels = ["__meta_docker_container_id"]
		target_label  = "container_id"
	}

	rule {
		source_labels = ["__meta_docker_container_name"]
		regex         = "/(.*)"
		target_label  = "container_name"
	}

	rule {
		source_labels = ["__meta_docker_network_ip"]
		target_label  = "container_ip"
	}

	rule {
		target_label = "instance"
		replacement  = "k5"
	}

	rule {
		target_label = "application"
		replacement  = "docker"
	}
}

loki.source.docker "logs_default_docker" {
	host          = "unix:///var/run/docker.sock"
	targets       = discovery.docker.logs_default_docker.targets
	forward_to    = [loki.process.logs_default_docker.receiver]
	relabel_rules = discovery.relabel.logs_default_docker.rules
}

prometheus.remote_write "mimir" {
	endpoint {
    url = "https://metrics.i40sys.com/api/v1/push"
	}
}

loki.write "logs_default" {
	endpoint {
		url = "https://logs.i40sys.com/loki/api/v1/push"
    min_backoff_period = "1s"
    max_backoff_period = "1m"
    max_backoff_retries = 10
	}
	external_labels = {}
  wal {
    enabled = true
    max_segment_age = "1h"
  }
}