News for hackers. Stuff that matters.
Re:All you need is Wide Events, not "Metrics, Logs and Traces" by _visgean on Tuesday February 27, 2024 @05:38PM (#39531146)
that depends on the sampling rate no? I would much rather have a rich log record sampled at 1% than more records that dont contain enough info to debug..
Re:All you need is Wide Events, not "Metrics, Logs and Traces" by growse on Tuesday February 27, 2024 @05:54PM (#39531319)
The people feeling the pain of (and paying for) the expensive data swamp are often not the same people who are yolo'ing the sample rate to 100% in their apps, because why wouldn't you want to store every event?

Put another way, you're in charge of a large telemetry event sink. How do you incentivise the correct sampling behaviour by your users?

Re:All you need is Wide Events, not "Metrics, Logs and Traces" by Spivak on Tuesday February 27, 2024 @06:48PM (#39531866)
Don't let the user pick the sampling rate. In Honeycomb land this is called the EMA Dynamic Sampler.

https://docs.honeycomb.io/manage-data-volume/refinery/sampli...

Re:All you need is Wide Events, not "Metrics, Logs and Traces" by kiitos on Tuesday February 27, 2024 @09:20PM (#39533116)
You should never need to sample telemetry data.
Re:All you need is Wide Events, not "Metrics, Logs and Traces" by gtirloni on Tuesday February 27, 2024 @06:02PM (#39531410)
Metrics sample rate yes but logging sample? When an end-to-end transaction for a very important task breaks, do I get *some* breadcrumbs to debug it?
Re:All you need is Wide Events, not "Metrics, Logs and Traces" by isburmistrov on Tuesday February 27, 2024 @07:27PM (#39532254)
Sampling can be smart, e.g. based on some field all events have (can be called traceId, haha).
Re:All you need is Wide Events, not "Metrics, Logs and Traces" by goosejuice on Tuesday February 27, 2024 @11:30PM (#39534020)
I agree. Sampling logs.. sounds dangerous. Obviously every system is different.

At least in GCP you can apply a filter to prevent ingestion and set different expiries on log budgets. This can help control costs without missing important entries.

Re:All you need is Wide Events, not "Metrics, Logs and Traces" by _visgean on Friday March 01, 2024 @01:45PM (#39565216)
I have used that approach before with sentry. It was a non-issue. It depends on nature of the project of course, we had a system that was running every second so if it failed it generated a lot of data..
Re:All you need is Wide Events, not "Metrics, Logs and Traces" by kiitos on Tuesday February 27, 2024 @09:18PM (#39533109)
It is a tragedy of the current generation of observability systems that they have inculcated the notion that telemetry data should be sampled. Absolute nonsense.