Skip to content

Logs

A record of events that have occurred within a system. Logs are time-stamped and typically contain information about specific transactions, errors, or system states.

Impact

Logs are the primary source of truth for forensic analysis and debugging. "Grepping the logs" is the first step in most incident responses.

Weinto take

Logs are Streams, not Files. (12-Factor App methodology). We don't manage log files; we stream log events to a centralized aggregator (ELK/Splunk). Also, Structured Logging (JSON) is mandatory. Humans shouldn't have to parse logs with regex; machines should parse them.