Ceph and Apache Druid Integration

Input and output integration overview

The Ceph plugin for Telegraf helps in gathering performance metrics from both MON and OSD nodes in a Ceph storage cluster for effective monitoring and management.

This plugin allows Telegraf to send JSON-formatted metrics to Apache Druid over HTTP, enabling real-time ingestion for analytical queries on high-volume time-series data.

Integration details

Ceph

The Ceph Storage Telegraf plugin is designed to collect performance metrics from Monitor (MON) and Object Storage Daemon (OSD) nodes within a Ceph storage cluster. Ceph, a highly scalable storage system, integrates its metrics collection through this plugin, facilitating easy monitoring of its components. With the introduction of this plugin in the 13.x Mimic release, users can effectively gather detailed insights into the performance and health of their Ceph infrastructure. It functions by scanning configured socket directories for specific Ceph service socket files, executing commands via the Ceph administrative interface, and parsing the returned JSON data for metrics. The metrics are organized based on top-level keys, allowing for efficient monitoring and analysis of cluster performance. This plugin provides valuable capabilities for managing and maintaining the performance of a Ceph cluster by allowing administrators to understand system behavior and identify potential issues proactively.

Apache Druid

This configuration uses Telegraf’s HTTP output plugin with json data format to send metrics directly to Apache Druid, a real-time analytics database designed for fast, ad hoc queries on high-ingest time-series data. Druid supports ingestion via HTTP POST to various components like the Tranquility service or native ingestion endpoints. The JSON format is ideal for structuring Telegraf metrics into event-style records for Druid’s columnar and time-partitioned storage engine. Druid excels at powering interactive dashboards and exploratory queries across massive datasets, making it an excellent choice for real-time observability and monitoring analytics when integrated with Telegraf.

Configuration

Ceph

[[inputs.ceph]]
  ## This is the recommended interval to poll. Too frequent and you
  ## will lose data points due to timeouts during rebalancing and recovery
  interval = '1m'

  ## All configuration values are optional, defaults are shown below

  ## location of ceph binary
  ceph_binary = "/usr/bin/ceph"

  ## directory in which to look for socket files
  socket_dir = "/var/run/ceph"

  ## prefix of MON and OSD socket files, used to determine socket type
  mon_prefix = "ceph-mon"
  osd_prefix = "ceph-osd"
  mds_prefix = "ceph-mds"
  rgw_prefix = "ceph-client"

  ## suffix used to identify socket files
  socket_suffix = "asok"

  ## Ceph user to authenticate as, ceph will search for the corresponding
  ## keyring e.g. client.admin.keyring in /etc/ceph, or the explicit path
  ## defined in the client section of ceph.conf for example:
  ##
  ##     [client.telegraf]
  ##         keyring = /etc/ceph/client.telegraf.keyring
  ##
  ## Consult the ceph documentation for more detail on keyring generation.
  ceph_user = "client.admin"

  ## Ceph configuration to use to locate the cluster
  ceph_config = "/etc/ceph/ceph.conf"

  ## Whether to gather statistics via the admin socket
  gather_admin_socket_stats = true

  ## Whether to gather statistics via ceph commands, requires ceph_user
  ## and ceph_config to be specified
  gather_cluster_stats = false

Apache Druid

[[outputs.http]]
  ## Druid ingestion endpoint (e.g., Tranquility, HTTP Ingest, or Kafka REST Proxy)
  url = "http://druid-ingest.example.com/v1/post"

  ## Use POST method to send events
  method = "POST"

  ## Data format for Druid ingestion (expects JSON format)
  data_format = "json"

  ## Optional headers (may vary depending on Druid setup)
  # [outputs.http.headers]
  #   Content-Type = "application/json"
  #   Authorization = "Bearer YOUR_API_TOKEN"

  ## Optional timeout and TLS settings
  timeout = "10s"
  # tls_ca = "/path/to/ca.pem"
  # tls_cert = "/path/to/cert.pem"
  # tls_key = "/path/to/key.pem"
  # insecure_skip_verify = false

Input and output integration examples

Ceph

1. Dynamic Monitoring Dashboard: Utilize the Ceph plugin to create a real-time monitoring dashboard that visually represents the performance metrics of your Ceph cluster. By integrating these metrics into a centralized dashboard, system administrators can gain immediate insights into the health of the storage infrastructure, which aids in quickly identifying and addressing potential issues before they escalate.

2. Automated Alerting System: Implement the Ceph plugin in conjunction with an alerting solution to automatically notify administrators of performance degradation or operational issues within the Ceph cluster. By defining thresholds for key metrics, organizations can ensure prompt response actions, thereby improving overall system reliability and performance.

3. Performance Benchmarking: Use the metrics collected by this plugin to conduct performance benchmarking tests across different configurations or hardware setups of your Ceph storage cluster. This process can assist organizations in identifying optimal configurations that enhance performance and resource utilization, promoting a more efficient storage environment.

4. Capacity Planning and Forecasting: Integrate the metrics gathered from the Ceph storage plugin into broader data analytics and reporting tools to facilitate capacity planning. By analyzing historical metrics, organizations can forecast future utilization trends, enabling informed decisions about scaling storage resources effectively.

Apache Druid

1. Real-Time Application Monitoring Dashboard: Use Telegraf to collect metrics from application servers and send them to Druid for immediate analysis and visualization in dashboards. Druid’s low-latency querying allows users to interactively explore system behavior in near real-time.

2. Security Event Aggregation: Aggregate and forward security-related metrics such as failed logins, port scans, or process anomalies to Druid. Analysts can build dashboards to monitor threat patterns and investigate incidents with millisecond-level granularity.

3. IoT Device Analytics: Collect telemetry from edge devices via Telegraf and send it to Druid for fast, scalable processing. Druid’s time-partitioned storage and roll-up capabilities are ideal for handling billions of small JSON events from sensors or gateways.

4. Web Traffic Behavior Exploration: Use Telegraf to capture web server metrics (e.g., requests per second, latency, error rates) and forward them to Druid. This enables teams to drill down into user behavior by region, device, or request type with subsecond query performance.

Feedback

Thank you for being part of our community! If you have any general feedback or found any bugs on these pages, we welcome and encourage your input. Please submit your feedback in the InfluxDB community Slack.