Log aggregation: EFK/Loki stack for NF troubleshooting

Centralized Logging Architecture

In a Kubernetes-based 5G Core with dozens of NF instances generating logs simultaneously, centralized log aggregation is essential for operational visibility. The EFK stack, comprising Elasticsearch, Fluent Bit, and Kibana, is the most common open-source solution. Fluent Bit runs as a DaemonSet on every node, tailing container log files and enriching them with Kubernetes metadata including pod name, namespace, labels, and node information. Enriched logs are forwarded to Elasticsearch for indexing and long-term storage. Kibana provides the query and visualization interface where operators…