Thanks Tim, I will.
Application authors insist on logging to the server and even the same database as the application.
Well…
Why do we do that… Stop it!
There are numerous reasons why we should not log changes to same server and/or database:
- Lack of Immutability
- Bloated Database Size
- System Failures lose logs
- Have to grant developers access to servers which violates the least-privilege rule
BEST practice for logging:
- After a durable write to local storage, provide a sink to log to remote immutable storage
- Do not log sensitive information
- Provide access to the logs, metrics, and traces to devs and users on the remote sink instead of the server
Monitoring is a good DevOps practice.
End of rant. Next!!!