A log router collects application logs as streams, then forwards them to a log aggregator for storage and analysis. It separates log delivery from the API’s main request path. section 11.5
This pattern supports security monitoring without relying on file logging, which can add performance pressure. A WAF can annotate malicious injection signals before the logs reach downstream analysis. section 11.5
A practical deployment pattern is:
- Write application logs to standard output. section 11.5
- Run a collector such as Logplex or Fluentd to gather and route the streams. section 11.5
- Place the collector beside the application as a sidecar container in container-based deployments. section 11.5
