Recommend
Picks among the three app-specific advisors (Reporter, Reducer, Retriever) based on the discovery snapshot. Pass a goal to get a single concrete install plan, or omit goal for a ranked comparison. Output is a markdown checklist — nothing is executed.
Example
"ranked install paths for
snap-abc123"Top pick: Reporter (standalone DaemonSet) — no forwarder changes required.
Path Status Why Reporter standalone ✓ ready parallel DaemonSet, no forwarder edits Reducer inline (filter) ✓ ready fluent-bit detected, Helm-managed Reducer inline (compact) ✓ ready fluent-bit + Helm + verified path Retriever ✗ blocked missing S3 bucket, SQS queues, IRSA role Re-run with
goal=cut-cost(orcompact/archive/just-metrics) for a concrete plan instead of a comparison.
More to ask
- "concrete plan: cut logging costs"
- "compact-mode plan, fluent-bit"
- "archive plan with
lx_live_...key"
Prerequisites
A fresh snapshot_id from Discover env. No Log10x components needed.
Tool schema (advanced)
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
snapshot_id |
string | yes | — | ID returned by Discover env. Cached for 30 min. |
goal |
string | no | — | just-metrics / cut-cost / compact / archive. Given → concrete plan; omitted → ranked table. |
api_key |
string | no | — | Log10x license key. Required for a complete install plan when goal is given. |
namespace |
string | no | snapshot's suggested namespace | Target namespace override. |
release_name |
string | no | my-<app> |
Helm release name override. |
destination |
string | no | auto, mock if none |
mock / elasticsearch / splunk / datadog / cloudwatch. Auto-detected from env when exactly one set of log-analyzer creds is present; falls back to mock when nothing is detected; returns "ambiguous" when multiple are detected. |
output_host |
string | no | — | Host for non-mock destinations. |
splunk_hec_token |
string | when destination=splunk | — | HEC token. |
action |
string | no | all |
Plan scope when goal is given: install / verify / teardown / all. Ignored when no goal. |
Detection rules (evaluated against the snapshot):
- No forwarder detected → standalone Reporter (parallel DaemonSet).
- Hand-rolled forwarder (not Helm-managed) → standalone Reporter.
- Helm-managed forwarder +
goal=compact→ Reducer inline withoptimize=true. Verified on all 5 forwarders (fluent-bit,fluentd,filebeat,logstash,otel-collector) at chart 1.0.8 + engine 1.0.9. goal=archivewithout Terraform-provisioned AWS infra → blocked. Preflight surfaces missing S3 buckets / SQS queues / IRSA role.