{"id":6387,"date":"2024-03-05T11:59:43","date_gmt":"2024-03-05T01:59:43","guid":{"rendered":"https:\/\/sysmit.com\/cf22\/?p=6387"},"modified":"2024-03-07T11:34:41","modified_gmt":"2024-03-07T01:34:41","slug":"clearing-observability-delusions","status":"publish","type":"post","link":"https:\/\/sysmit.com\/cf22\/clearing-observability-delusions\/","title":{"rendered":"#30 Clearing Delusions in Observability (with David Caudill)"},"content":{"rendered":"\n<p><strong><span class=\"stk-highlight\" style=\"color: var(--base-3);background-color: var(--contrast-3)\">Episode 30 [SREpath Podcast]<\/span><\/strong><\/p>\n\n\n<div class=\"gb-grid-wrapper gb-grid-wrapper-0de1a18b\">\n<div class=\"gb-grid-column gb-grid-column-fe753567\"><div class=\"gb-container gb-container-fe753567\">\n\n<iframe style=\"border-radius:12px\" src=\"https:\/\/open.spotify.com\/embed\/episode\/49z2l9MDQumamJpYr6zyb0?utm_source=generator\" width=\"100%\" height=\"152\" frameBorder=\"0\" allowfullscreen=\"\" allow=\"autoplay; clipboard-write; encrypted-media; fullscreen; picture-in-picture\" loading=\"lazy\"><\/iframe>\n\n<\/div><\/div>\n<\/div>\n\n<h2 class=\"wp-block-heading\" id=\"show-notes\">Show notes<\/h2>\n\n\n<p>How critical is observability (o11y) to SRE work?<\/p>\n\n\n\n<p>To me,&nbsp;observability is&nbsp;<em>the<\/em>&nbsp;core foundation practice for&nbsp;<em>all&nbsp;<\/em>other SRE practice areas.&nbsp;Without it, you&#8217;re flying blind.&nbsp;<\/p>\n\n\n\n<p>David Caudill&nbsp;is not afraid of making controversial viewpoints about this area. But he doesn&#8217;t do it for glory. To him, it&#8217;s about&nbsp;driving better practices.&nbsp;<\/p>\n\n\n\n<p>After all, it&#8217;s not in his interest to promote (sell) shiny objects.&nbsp;He runs engineering teams at Capital&nbsp;One, one of America&#8217;s largest banks, so he wants a functional offering more than overly done hype.&nbsp; <\/p>\n\n\n\n<p>He believes that delusions are getting in the way of our success in observability. We explore some of them in this episode of the SREpath podcast. <\/p>\n\n\n\n<p>You can <a href=\"https:\/\/www.linkedin.com\/in\/davidcaudill\/\">connect with David via LinkedIn<\/a><\/p>\n\n\n<h2 class=\"wp-block-heading\" id=\"more-about-our-conversation\">More about our conversation<\/h2>\n\n\n<p><strong>David&#8217;s stance is simple:<\/strong><mark style=\"background-color:#fffc00\" class=\"has-inline-color has-main-color\">\u00a0observability itself is\u00a0not bad; it&#8217;s just that we are often not doing it with the right mindset!<\/mark> We are seeking elegant technical solutions to complicated real world problems.\u00a0Notice the disconnect?<\/p>\n\n\n\n<p>I had a chat with him a few weeks back about all of this.<\/p>\n\n\n\n<p>Our conversation touched on ideas you likely&nbsp;won&#8217;t have heard anywhere else including:<\/p>\n\n\n\n<p>\u27a1\ufe0f David&#8217;s analogy for&nbsp;<strong>observability of&nbsp;software architectures<\/strong>&nbsp;&#8220;from monoliths to rocks,&nbsp;pebbles and gaseous clouds&#8221;<\/p>\n\n\n\n<p>\u27a1\ufe0f The&nbsp;<strong>need to handle cognitive load&nbsp;<\/strong>effectively when it comes to your observability system by simplifying measures (inspired by Google)<\/p>\n\n\n\n<p>\u27a1\ufe0f&nbsp;<strong>Moving toward event-based SLOs&nbsp;<\/strong>rather than leaning too heavy&nbsp;on time-based metrics for your observability&nbsp;<\/p>\n\n\n\n<p>Let&#8217;s unpack each of these:<\/p>\n\n\n<h3 class=\"wp-block-heading\" id=\"observability-of-software-architectures-from-monoliths-to-rocks-pebbles-and-gaseous-clouds\"><strong>Observability of software architectures &#8220;from monoliths to rocks, pebbles, and gaseous clouds&#8221;<\/strong><\/h3>\n\n\n<p>Did I mention that David likes to use fun and peculiar analogies to highlight his ideas? I love it, and you might too.&nbsp;<\/p>\n\n\n\n<p>But what does he mean by this particular analogy (above)?&nbsp;\ud83e\udd14<\/p>\n\n\n\n<p>David put it like this (quote truncated for brevity):<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><em>&#8220;They start with a monolith, and they decide, &#8216;we could break this up into a few service oriented architecture&#8217; blobs [rocks]&#8230;&nbsp;then go to microservices [pebbles], and then into lambdas [gaseous clouds]. Before long, you&#8217;re down to really, really intense atomicity in this architecture.&#8221;<\/em><\/p>\n<\/blockquote>\n\n\n\n<p>This is a common enough&nbsp;pattern in more than a few organizations I know inside details of. It makes sense as microservices is the shift that cloud pundits have been pushing for a decade now.&nbsp;<\/p>\n\n\n\n<p>Serverless these days is not the quiet one in the corner.<\/p>\n\n\n\n<p>So all seems well and good.&nbsp;How much can atomicity hurt? <\/p>\n\n\n\n<p>Well, it can be painful if your observability system can&#8217;t handle it.<\/p>\n\n\n\n<p>David added the fact that&nbsp;this kind of atomicity&nbsp;adds cardinality to observability.&nbsp;It adds overhead that itself needs to be observed. This overhead can start to feel as&nbsp;large as the application itself. <\/p>\n\n\n\n<p>I&#8217;ve heard people echo David&#8217;s sentiment that this overhead can become&nbsp;a completely invisible cloud of noise around your application that has nothing to do with your application.<\/p>\n\n\n\n<p><br>A cautionary tale indeed for carefully reworking your software architecture.&nbsp;Be sure to keep your o11y capabilities in mind when doing so!<\/p>\n\n\n<h3 class=\"wp-block-heading\" id=\"handling-cognitive-load-when-it-comes-to-observability-systemsnbsp\">Handling cognitive load when it comes to observability systems <\/h3>\n\n\n<p>Our discussion of architectural woes in o11y&nbsp;drove me to bring up&nbsp;an area that is so critical to successful engineering work but is often neglected:&nbsp;<em>cognitive load<\/em>.&nbsp;<\/p>\n\n\n\n<p>Observability systems are overloading engineers with too much data and things to see.&nbsp;<\/p>\n\n\n\n<p>David&#8217;s suggestion to my assertion around cognitive load made me chuckle and grimace at the same time:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>&#8220;<em>I&#8217;m very much of the opinion that you want to preserve simplicity as long as you can. There&#8217;s a lot of anticipatory architecture changes that happen really on the optimism like, &#8216;Oh, it&#8217;s going to blow up!&#8217; I have worked in environments where it didn&#8217;t blow up and it was still really complex because we were prepared for a legion of people that never showed up.&#8221;<\/em><\/p>\n<\/blockquote>\n\n\n\n<p>He added that engineers need to &#8220;avoid complexity like the plague&#8221; and keep things as simple as they possibly can.&nbsp;<\/p>\n\n\n<h3 class=\"wp-block-heading\" id=\"moving-toward-eventbased-slos-rather-than-solely-timebased-metrics\"><strong>Moving toward event-based SLOs rather than solely time-based metrics<\/strong><\/h3>\n\n\n<p>Drawing from experience, David recalls his attempts at making time-based SLOs work. Over time and several failures, he learned that event-based SLOs are more appropriate in many situations.&nbsp;<\/p>\n\n\n\n<p>He stresses the rationale for not using time-based SLOs through this&nbsp;quote:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><em>&#8220;Because not every minute of time is the same as every other minute. And if your service goes down when no one is using it, who cares? That&#8217;s not a problem. And, you know, you&#8217;re not, in most cases, contractually obligated to provide this many minutes a month.&#8221;<\/em><\/p>\n<\/blockquote>\n\n\n\n<p>Doing so can become &#8220;a really confusing side quest&#8221; that&#8217;s difficult to connect to reality.&nbsp;David emphasizes that SLOs are a sociotechnical construct and because of this, they need people to buy into what you&#8217;re trying to achieve.&nbsp;<\/p>\n\n\n\n<p>His experience has shown that it&#8217;s a lot easier to get people behind simpler SLOs like error rate rather than time-based SLOs.For example, you could set SLOs for the&nbsp;number of 50<em>x&nbsp;<\/em>that are occurring in your services. <\/p>\n\n\n\n<p>Your service might normally return a 0.1% error rate, but if that number doubles, it can start a conversation. The key behind doing any of this is knowing that you can&#8217;t do bottom-up with SLOs. You need senior leadership support to make it happen.<br><br>If you can&#8217;t get that buy in and that can be really tough.&nbsp;This could explain the sheer volume of failed SLOs in the industry today.&nbsp;&nbsp;<\/p>\n\n\n\n<p>You need to invest your time in SLOs, but keep it simple. David recommends to not\u00a0jump into the whole hype surrounding SLOs from the market.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n<h2 class=\"wp-block-heading\" id=\"here-are-10-more-takeaways-from-the-show\">Here are 10 more takeaways from the show:<\/h2>\n\n\n<ol>\n<li><strong>Understand your&nbsp;observability billing model:<\/strong>&nbsp;Gain a clear understanding of your service provider&#8217;s billing model to avoid unexpected expenses. This helps in planning and optimizing costs associated with high cardinality data and log retention.<\/li>\n\n\n\n<li><strong>Employ cost optimization tactics:<\/strong>&nbsp;tactics&nbsp;like sampling and selective logging can help manage costs without sacrificing the visibility needed for effective monitoring. This is particularly valuable in high-traffic scenarios where full resolution logs are not financially justifiable.<\/li>\n\n\n\n<li><strong>Enhance your log retention policies:<\/strong>&nbsp;Use automated tools to manage log retention, ensuring that you&#8217;re only keeping what&#8217;s necessary and utilizing cost-effective storage solutions like Amazon S3 for long-term storage.<\/li>\n\n\n\n<li><strong>Make querying and data access cost-effective:<\/strong>&nbsp;Look into using&nbsp;tools like Amazon Athena for querying large datasets at a low cost, which enables you to access your logs as needed without incurring high storage and processing fees.<\/li>\n\n\n\n<li><strong>Take the time to prioritize your&nbsp;data:<\/strong>&nbsp;Focus on logging and monitoring the most critical aspects of your system to avoid information overload and reduce costs. This involves understanding what data is truly valuable for your specific context.<\/li>\n\n\n\n<li><strong>Learn to differentiate status vs. diagnostic information:<\/strong>&nbsp;Status indicators and diagnostic data often give mixed up as solving the same problem.&nbsp;They don&#8217;t.&nbsp;Simplify your monitoring by providing clear status indicators (red, yellow, green) for quick assessments and&nbsp;reserve detailed diagnostic data for deeper analysis.<\/li>\n\n\n\n<li><strong>Effectively leverage the power of metrics:<\/strong>&nbsp;Develop work metrics that reflect the&nbsp;<em>actual<\/em>&nbsp;performance and health of your platform. This approach helps in quickly identifying issues without sifting through irrelevant data.<\/li>\n\n\n\n<li><strong>Simplify your incident management:<\/strong>&nbsp;Aim for a &#8220;single pane of glass&#8221; dashboard that offers a straightforward view of system health to reduce time spent in identifying and debating the presence and scope of issues.<\/li>\n\n\n\n<li><strong>Educate your stakeholders&nbsp;and manage their expectations:<\/strong>&nbsp;Help your various stakeholders understand the cost-benefit analysis behind observability practices including&nbsp;data logging and retention strategies that foster support for cost-effective practices.<\/li>\n\n\n\n<li><strong>Go beyond the metrics mindset:<\/strong>&nbsp;Recognize the value of logs and stack traces as critical diagnostic tools that can support your monitoring and alerting. Ensure that your observability strategy integrates these elements effectively for pinpointing issues.<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p>You will not want to miss his insights (and his charismatic humor).<\/p>\n\n\n\n<p>In\u00a0Episode #30 of the SREpath podcast, David Caudill gives me his take on clearing delusions in observability.<\/p>\n\n\n\n<p>I\u2019m sure your team will appreciate you clearing any accidental misgivings they may have developed about observability&nbsp;\ud83d\ude01<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Episode 30 [SREpath Podcast] Show notes How critical is observability (o11y) to SRE work? To me,&nbsp;observability is&nbsp;the&nbsp;core foundation practice for&nbsp;all&nbsp;other SRE practice areas.&nbsp;Without it, you&#8217;re flying blind.&nbsp; David Caudill&nbsp;is not afraid of making controversial viewpoints about this area. But he doesn&#8217;t do it for glory. To him, it&#8217;s about&nbsp;driving better practices.&nbsp; After all, it&#8217;s not [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[72,48],"tags":[85,31],"_links":{"self":[{"href":"https:\/\/sysmit.com\/cf22\/wp-json\/wp\/v2\/posts\/6387"}],"collection":[{"href":"https:\/\/sysmit.com\/cf22\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sysmit.com\/cf22\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sysmit.com\/cf22\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sysmit.com\/cf22\/wp-json\/wp\/v2\/comments?post=6387"}],"version-history":[{"count":6,"href":"https:\/\/sysmit.com\/cf22\/wp-json\/wp\/v2\/posts\/6387\/revisions"}],"predecessor-version":[{"id":6435,"href":"https:\/\/sysmit.com\/cf22\/wp-json\/wp\/v2\/posts\/6387\/revisions\/6435"}],"wp:attachment":[{"href":"https:\/\/sysmit.com\/cf22\/wp-json\/wp\/v2\/media?parent=6387"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sysmit.com\/cf22\/wp-json\/wp\/v2\/categories?post=6387"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sysmit.com\/cf22\/wp-json\/wp\/v2\/tags?post=6387"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}