3 ms·
Many commenters seem unenthusiastic about this approach, but it seems like it solves some useful problems for my typical use cases. Regarding dropped timestamp
by ericyd 2y ago
Many commenters seem unenthusiastic about this approach, but it seems like it solves some useful problems for my typical use cases.
Regarding dropped timestamps: if log order is preserved within an aggregation, that would be sufficient for me. I'm less concerned with millisecond precision and more interested in sequence. I'm making a big assumption that aggregation would be limited to relatively short time horizons on the order of seconds, not minutes.
Grouping related logs sounds like a big win to me in general. Certainly I can perform the same kind of filtering manually in a log viewer, but having logs grouped by common properties by default sounds like it would make logs easier to scan.
I've never been involved in billing for logging services so I can't comment on the efficiency gains of log aggregation vs zstd or gzip as proposed by some other commenters.