In this fun, fast-paced talk, Dan puts his sysadmin hat on and takes you on a fun—and hopefully enlightening—journey through a topic that most of us take for granted: logs. There’s a good chance you’ve been emitting, collecting, and generally dealing with logs for much of your career (in one form or another). Yet despite the fact that logging is a technique as old as computing itself, there’s a very good chance that you’ve never stopped to ask yourself: what are they? Really, what are logs? Good question. Let’s find out!
Receipt as log → Date and time 10 — @phrawzty // Scaleway
Receipt as log → Date and time → Something happened 11 — @phrawzty // Scaleway
Receipt as log → Date and time → Something happened → Formatting! 12 — @phrawzty // Scaleway
Receipt as log → Date and time → Something happened → Formatting? → [d]d/[m]m/yyyy & HH:MM 13 — @phrawzty // Scaleway !
What have we learnt so far? → Minimum: datestamp and event → Structure and interpretation matter 14 — @phrawzty // Scaleway
Receipt as log → Source of the message 15 — @phrawzty // Scaleway
Receipt as log → Source of the message → Source of the event 16 — @phrawzty // Scaleway
Receipt as log → Source of the message → Source of the event → A challenger appears! 17 — @phrawzty // Scaleway
Receipt as log → Source of the message → Source of the event → A challenger appears! → Empty values! Oh no! 18 — @phrawzty // Scaleway
What have we learnt so far? → Minimum: datestamp and event → Structure and interpretation matter → Logs and events are separate things 19 — @phrawzty // Scaleway
Receipt as log → metadata 20 — @phrawzty // Scaleway
Receipt as log → metadata → Tags → Tagging can be hard 22 — @phrawzty // Scaleway
What have we learnt so far? → Minimum: datestamp and event → Structure and interpretation matter → Logs and events are separate things → Metadata is not the message (also: tags) 23 — @phrawzty // Scaleway
Receipt as log → Message 24 — @phrawzty // Scaleway
Receipt as log → Message → Description of event 25 — @phrawzty // Scaleway
Receipt as log → Message → Description of event → Structure 26 — @phrawzty // Scaleway
Receipt as log → Message → Description of event → Structure → Presentation 27 — @phrawzty // Scaleway
What have we learnt so far? → Minimum: datestamp and event → Structure and interpretation matter → Logs and events are separate things → Metadata is not the message (also: tags) → Presentation is everything 28 — @phrawzty // Scaleway