logs-as-data

Table of Contents

1 Logging    slide

  • Records of things that happened

2 Current logging approach    slide

  • File-based
  • "Stringly typed", string everywhere
  • (A lot of) mini languages with custom syntax
  • Neither human-readable nor computer-readable
  • Passive, after the fact

3 Should be    slide

  • Queryable (without having to write parser everytime)
  • Event stream

4 Should be    slide

  • Log lines => events
  • Strings => maps
  • Files => streams
  • Log crunching => event processing

5 Should enable

Debugging, auditing, metrics, analysis, alerting

6 How    slide

  • Save to queryable sources (DB not files)
  • Publish/subscribe events (e.g. redis)

Date: 2012-08-29 18:04:13 ICT

Author: Nguyễn Tuấn Anh

Org version 7.8.11 with Emacs version 24

Validate XHTML 1.0