Gnoseed
Observability · Flashcard

What does Loki read when you grep a week of logs?

Why this is the answer

Loki indexes only the label sets and keeps log content compressed in object storage, so a text search first uses labels to pick streams and then brute-force scans just those chunks — which is why tight label selectors matter so much. There is no full-text index (that is the Elasticsearch trade-off Loki declines), labels do narrow the scan, and the compactor merges index files rather than summarising content.

Read more in the docs
Study in Gnoseed →