{
  "id": "stack-part:logging",
  "_kind": "StackPart",
  "_file": "domain/stack-parts/logging.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "Logging",
    "category": "observability",
    "description": "Centralized log aggregation, indexing, and search for structured and\nunstructured log streams emitted by applications, infrastructure, and\nplatform components. Core concerns include log shipping (Fluentd,\nFluent Bit, Vector), retention policies, cardinality, and cost.\n\nPopular implementations: the ELK/EFK stack (Elasticsearch/OpenSearch +\nLogstash/Fluentd + Kibana), Grafana Loki (label-based log aggregation\npaired with Grafana dashboards), Splunk (enterprise), and managed\nofferings (AWS CloudWatch Logs, Datadog Logs, Papertrail). Structured\nJSON logging is preferred over plain text for machine-readable queries.\nClosely integrated with the Metrics and Tracing stack parts.\n"
  },
  "outgoingEdges": [
    {
      "from": "stack-part:logging",
      "to": "tool:elasticsearch",
      "kind": "implemented_by",
      "attributes": {}
    },
    {
      "from": "stack-part:logging",
      "to": "platform-service:aws-cloudwatch",
      "kind": "implemented_by",
      "attributes": {}
    },
    {
      "from": "stack-part:logging",
      "to": "skill-area:log-aggregation",
      "kind": "stack_part_used_by",
      "attributes": {}
    },
    {
      "from": "stack-part:logging",
      "to": "skill-area:observability-pipeline",
      "kind": "stack_part_used_by",
      "attributes": {}
    }
  ],
  "incomingEdges": [
    {
      "from": "platform-service:aws-cloudwatch",
      "to": "stack-part:logging",
      "kind": "implements_stack_part"
    },
    {
      "from": "platform-service:aws-cloudwatch",
      "to": "stack-part:logging",
      "kind": "implements_stack_part",
      "attributes": {}
    },
    {
      "from": "platform-service:azure-monitor",
      "to": "stack-part:logging",
      "kind": "implements_stack_part"
    },
    {
      "from": "platform-service:azure-monitor",
      "to": "stack-part:logging",
      "kind": "implements_stack_part",
      "attributes": {}
    },
    {
      "from": "tool-server:mcp-datadog",
      "to": "stack-part:logging",
      "kind": "integrates_with",
      "attributes": {}
    },
    {
      "from": "tool-server:mcp-splunk",
      "to": "stack-part:logging",
      "kind": "integrates_with",
      "attributes": {}
    },
    {
      "from": "tool-server:mcp-loki",
      "to": "stack-part:logging",
      "kind": "integrates_with",
      "attributes": {}
    }
  ]
}