3 ms·
A better compromise would be always having logging on but only retaining very recent logs. You need the infrastructure to support logging and correlation anyway
by brazzledazzle 11y ago
A better compromise would be always having logging on but only retaining very recent logs. You need the infrastructure to support logging and correlation anyway and if you have a short enough retention period you don't have to worry about dealing with growing infrastructure just to support it.
- mostlyjason 11y agoYeah I think most people store them for a limited time, such as a week or a month. Most issues that pop up will only be relevant that long. You can have permanent archives for individual data since storage is cheap, or even summary metrics. Better to start with ground truth because you often don't know what data you'll need in hindsight.