title: Istio (1.6.4) best practice for log aggregation on K8s
body: <p>We plan to use <strong>Istio on our AWS EKS K8s-Cluster</strong> and have explored Ingress, Egress and auth via Keycloak so far, but we  are a little lost how we can easily aggregate all logs to a single, easy to query and monitoring place. Istio docs are just mentioning <strong>Mixer will be dead</strong>, but no really help what else could be done.</p>
  <p>Scope: Access-Logs, Istiod logs and Apllication/Microservices logs from stdout as well.
  <strong>mTLS is enabled cluster-wide</strong> (that seems to make problems using log sidecars)</p>
  <p>We use Kiali, but that's not exactly what we need.
  We are looking more on something like an <strong>ELK-Stack or Graylog</strong> but idealy more lightweight. We thought of <strong>Grafana Loki</strong>, but that its quite calm when you google for Istio+Loki... Seems to be not working.</p>
  <p><strong>So my question</strong>: What would be a <strong>best practice for log aggregation with Istio</strong> on K8s for all these logs in one place, and what is needed to getting it started (<strong>tutorial/how-to link?</strong>)</p>
  <p><strong>Thanks in advance!</strong></p>