confusion between data from elk and prometheus

[nesa...@gmail.com]

Hi 

I have configured promtail to generate metrics from an Nginx log file,

we also have the log file in our ELK stack.

what confuses me is the fact that when I filter the promtail metrics in the grafana to only show the 301 status code, I get this output:

here is the query:

sum(rate(nginx_request_status{status="301"}[5m]))

But here is what I see in the ELK output:

So according to ELK, everything is fine between 18:00 to 19:00 but according to Prometheus metric, the redirect rate is about 1 between 18:00 to 19:00

[Brian Candler]

You're talking about promtail, which is part of loki, not prometheus.

Try the "lokiproject" group instead.