3 ms·
Not really. Most observability platforms already have tools to support this kind of workflow in a more cost effective way. > Also, logging everything creates y
by hnlmorg 1y ago
Not really. Most observability platforms already have tools to support this kind of workflow in a more cost effective way.
> Also, logging everything creates yet another security hole to worry about.
I think the real problem isn’t logging, it’s the fact that your developers are logging sensitive information. If they’re doing that, then it’s a moot point if those logs are also being pushed to a third party observability platform or not because you’re already leaking sensitive information.
- jgalt212 1y agoFair enough, but if you don't push them to "log everything" there are less chances for error.
- hnlmorg 1y agoI disagree. If developers think “log everything” means “log PII” then that developer is a liability regardless. Also, this is the sort of thing that should get picked up in non-prod environments before it becomes a problem. If you get to the point where logging is a risk then you’ve had other failures in processes.
- deleted 1y ago[deleted]