Skip to main content
Gå til innhold

Getting started - Puppet-managed VMs

Logs only

OpenTelemetry is not supported on Puppet-managed VMs, and this path ships logs to Loki only. If you also need metrics or traces, you must either implement a pipeline yourself using OTLP or a similar mechanism, or move the workload to PaaS. See Observability overview for the two supported paths on Platon.

If your application runs on virtual machines managed by Puppet, you can use the pmodule_vector module to ship logs to Loki.

Request access​

Contact the Platon team on #platon-observability (Slack) with:

  1. A tenant name for your team or product
  2. The Microsoft Entra ID group that should have access

We will:

  • Create your tenant and store credentials in Vault
  • Set up your Grafana organization and data sources

Configure Puppet​

Start by making sure the pmodule_vector module is configured by the node(s) you're trying to configure.
If pmodule_vector is already included and configured, you can skip this step. You must make sure that the pmodule_vector is included, and make sure these parameters are set in hiera:

  • pmodule_vector::loki_credentials_vault_path: must be set to a Vault path containing the Loki credentials, that is accessible by the node (this requires pmodule_vault to be bootstrapped with a token on the node)
  • pmodule_vector::tenant_id: must be set to a default tenant ID for the node

Then add the pmodule_vector::file resource to your Puppet configuration:

pmodule_vector::file { 'myapp':
  paths     => ['/var/log/myapp/*.log'],
  tenant_id => 'your-tenant-name',
}

Parameters​

ParameterDescription
pathsArray of log file paths (supports wildcards)
tenant_idYour tenant name (provided by Platon)
parse_as_jsonSet to true if your logs are JSON formatted (optional)

Multiple log sources​

You can define multiple log sources:

pmodule_vector::file { 'myapp':
  paths     => ['/var/log/myapp/*.log'],
  tenant_id => 'my-team',
}

pmodule_vector::file { 'nginx':
  paths     => ['/var/log/nginx/access.log', '/var/log/nginx/error.log'],
  tenant_id => 'my-team',
}

What the module does​

The pmodule_vector module:

  1. Installs Vector on your VM
  2. Configures Vector to read from the specified log files
  3. Retrieves credentials from Vault
  4. Ships logs to Loki with the correct tenant header

The module handles authentication for you.

View your logs​

After Puppet applies the configuration:

  1. Go to grafana.platon.sikt.no. You are automatically logged in with Entra ID.
  2. Select your organization
  3. Go to Explore and select your Loki data source

Next steps​