Fluentd vs Oracle Cloud Infrastructure Logging

Fluentd is a free, open-source data collector for creating a unified logging layer. It uses JSON to handle log collection, filtering, buffering, and output across sources and destinations. More than 500 community plugins connect it to data sources and outputs, including Elasticsearch and Kibana, Splunk, AWS S3, Kafka, BigQuery, Datadog, and OpenTelemetry. It supports memory and file buffering, failover, and high availability to help prevent data loss between nodes. The project reports that a vanilla instance uses 30–40 MB of memory and can process 13,000 events per second per core. Fluentd v1 runs on Linux, Mac OSX, and Windows; community distributions also include Docker images, a Kubernetes DaemonSet, and Ruby gems. It is self-hosted, and its components are available under the Apache 2 License. The project lists community help and commercial support from companies offering enterprise services. The homepage notes vulnerabilities patched in Fluentd v1.19.3 and advises updating fluent-package to v6.0.4.

Oracle Cloud Infrastructure Logging is a cloud service for collecting and working with audit logs, OCI service logs, and custom application logs. It supports SQL-like searches, filtering, aggregation, and visualization across infrastructure, application, audit, and database logs, with structured parsing and log pipelines. Custom logs can come from OCI instances, Oracle Container Engine for Kubernetes, on-premises environments, and other cloud providers. Listed service sources include Network Flow Logs, Load Balancer, Object Storage, Functions, API Gateway, and Events. You can use the OCI console, an SDK, command-line interface, REST API, or Terraform. Connector Hub can route logs to Monitoring, Notifications, Streaming, third-party destinations including Splunk, or Object Storage; exports to Object Storage can provide indefinite retention. Ingestion uses Fluentd, and events are normalized to CloudEvents 1.0. Access is managed through log groups and Oracle Identity and Access Management policies. The free tier includes 10 GB of log storage per month, with ingestion and search free. Pay-as-you-go storage is $0.05 per GB stored per month.