Lab: Install OpenObserve and ingest your first logs

What you will learn in this TP

• Deploy OpenObserve
• Ingest JSON
• Query with SQL

Introduction #

What you will learn in this section

• Deploy OpenObserve
• Ingest JSON
• Query with SQL

Context. Your team is looking for a log platform lighter than an Elasticsearch cluster. You build a prototype in a few minutes.

Prerequisites: Docker Compose, curl, jq  ·  Estimated time: 30 min

A platform ready to receive data.

Setup #

Guided steps, with their solution.

1. 1. Start OpenObserve

   Why? A single container is enough: the product's main asset.

   Write the Compose file, start it and check /healthz.

2. 2. Send events

   Why? No schema to declare: the stream is born at the first write.

   Send three events to the commandes stream, and read the response body.

3. 3. Find them with SQL

   Why? The query always needs a time range, in microseconds.

   Compute the number of events and the average duration per service. Wait a few seconds if the result is empty.

4. 4. Observe the transformations

   Why? These rules explain many queries returning nothing.

   Send [{"Level":"INFO","http":{"status":500}}] to an essai stream, then find it in the UI. What are the fields called now?

Difficulty level : ●○○○○ (1/5)