Re:All you need is Wide Events, not "Metrics, Logs and Traces"
by _visgean on Tuesday February 27, 2024 @05:38PM
(#39531146)
that depends on the sampling rate no? I would much rather have a rich log record sampled at 1% than more records that dont contain enough info to debug..
[ Parent
| on HN ]
Re:All you need is Wide Events, not "Metrics, Logs and Traces"
by growse on Tuesday February 27, 2024 @05:54PM
(#39531319)
The people feeling the pain of (and paying for) the expensive data swamp are often not the same people who are yolo'ing the sample rate to 100% in their apps, because why wouldn't you want to store every event?
Put another way, you're in charge of a large telemetry event sink. How do you incentivise the correct sampling behaviour by your users?
Re:All you need is Wide Events, not "Metrics, Logs and Traces"
by Spivak on Tuesday February 27, 2024 @06:48PM
(#39531866)
Don't let the user pick the sampling rate. In Honeycomb land this is called the EMA Dynamic Sampler.
https://docs.honeycomb.io/manage-data-volume/refinery/sampli...
Re:All you need is Wide Events, not "Metrics, Logs and Traces"
by kiitos on Tuesday February 27, 2024 @09:20PM
(#39533116)
You should never need to sample telemetry data.
Re:All you need is Wide Events, not "Metrics, Logs and Traces"
by gtirloni on Tuesday February 27, 2024 @06:02PM
(#39531410)
Metrics sample rate yes but logging sample? When an end-to-end transaction for a very important task breaks, do I get *some* breadcrumbs to debug it?
Re:All you need is Wide Events, not "Metrics, Logs and Traces"
by isburmistrov on Tuesday February 27, 2024 @07:27PM
(#39532254)
Sampling can be smart, e.g. based on some field all events have (can be called traceId, haha).
Re:All you need is Wide Events, not "Metrics, Logs and Traces"
by goosejuice on Tuesday February 27, 2024 @11:30PM
(#39534020)
I agree. Sampling logs.. sounds dangerous. Obviously every system is different.
At least in GCP you can apply a filter to prevent ingestion and set different expiries on log budgets. This can help control costs without missing important entries.
Re:All you need is Wide Events, not "Metrics, Logs and Traces"
by _visgean on Friday March 01, 2024 @01:45PM
(#39565216)
I have used that approach before with sentry. It was a non-issue. It depends on nature of the project of course, we had a system that was running every second so if it failed it generated a lot of data..