In the Container world, log management always faces a technical difficulty, because Container has its own filesystem, and when Container is dead or evicted, the log files are gone. In addition, Kubernetes can easily scale out and scale down the Pods, so we need to care about a centralized log persistent mechanism.

Kubernetes has an add-on for setting up centralized log management, which is called EFK. EFK stands for Elasticsearch, Fluentd, and Kibana. These applications' stack bring you a full function of log collection, indexing, and UI.