swtich from ELK to Loki!

simple-logs/README.md

@@ -0,0 +1,61 @@
+# Simple Logs
+
+A dead-simple log viewer using Grafana + Loki. Much easier than ELK/Kibana!
+
+## Features
+- **ALL logs in one place** - Docker containers + system logs
+- **Simple interface** - Just one dashboard, no complex setup
+- **Fast & lightweight** - Uses 10x less resources than ELK
+- **Real-time** - Logs appear instantly
+- **No configuration** - Works out of the box
+
+## Quick Start
+
+1. **Install**
+```bash
+dropshell install simple-logs
+```
+
+2. **Access**
+- Go to: `http://<server-ip>:3000`
+- Login: `admin` / `admin` (change on first login)
+
+3. **View Logs**
+- Click the **Dashboards** icon (4 squares) on left
+- Click **"Simple Logs"**
+- That's it! All your logs are there
+
+## How to Use
+
+### Filter by Container
+Click any `container_name` label to see only that container's logs
+
+### Search Text
+Use the search box at the top to find specific text
+
+### Change Time Range
+Top-right corner - set to "Last 5 minutes" for recent logs
+
+### View Details
+Click any log line to expand and see full details
+
+## What Gets Logged
+- All Docker container logs
+- System logs (/var/log/syslog)
+- Authentication logs (/var/log/auth.log)
+
+## Ports
+- `3000` - Grafana Web UI
+- `3100` - Loki API (internal)
+
+## Why This Instead of ELK?
+- **10x simpler** - One dashboard vs Kibana's complexity
+- **10x smaller** - ~200MB RAM vs 2-3GB for ELK
+- **Instant setup** - No index patterns, no field mappings
+- **Just works** - No configuration needed
+
+## Advanced: Custom Queries
+In the logs panel, you can use LogQL queries:
+- `{container_name="myapp"}` - Specific container
+- `{job="syslog"} |= "error"` - System errors
+- `{job="docker"} |~ "(?i)error|warn"` - All Docker warnings/errors