Live data from Hacker News

Show HN: Monitoror – Unified monitoring wallboard

monitoror.com

91–100 of 125 posts

Re: Show HN: Monitoror – Unified monitoring wallboard

#91
post #25

Earlier quoted context omitted.

> I can’t tell you how many times I caught an issue because I knew our metrics backwards and forwards, but it didn’t trip an alert threshold. So how many times was an issue missed because you weren't in the office, or because you were looking at your own screen and not dashboards at the moment? Humans are incredibly powerful, but our whole job as SREs is to make things reliable, repeatable, and scalable. We're doing…

> Similarly, if a human found an issue and alert didn't trip, I'd count that as a bug/missing feature in the monitoring. The way that I took the GP's point was that humans can find things that haven't yet been automated, while automation can't (at least not yet, but I'd argue it'll take AGI for that.)

Yes, I agree with this. But if you're relying on humans to look at dashboards to keep your actual service up in the moment, you're not seriously committing to automating (just like if you SSH to every machine you Terraform to tweak things, you're not really committed to Terraform).

What you should do is rely on automation to detect problems and alert people, and in postmortems, look at graphs and have humans say things like "Hey, this queue kept steadily climbing for three hours before the outage" or "We would have noticed it in this metric but it's so noisy so we can't alert on it" or something. Then you can write more automation (or focus on some prerequisite dev work).

Re: Show HN: Monitoror – Unified monitoring wallboard

#92
post #53
post #43

Care to explain why one would use this over something much more capable like Grafana? [1] [1] https://github.com/grafana/grafana

Grafana needs a backend datastore, and typically prometheus exporters on each app, etc to get timeseries data that gets into the backend. This seems to be checking endpoints for data at that specific time, not really doing any complex calculations or anything of that nature.

How often do you have data that is

1) important enough to display on a dashboard 2) not important enough to record so you can track it over time

?

Re: Show HN: Monitoror – Unified monitoring wallboard

#93
post #25

Earlier quoted context omitted.

> I can’t tell you how many times I caught an issue because I knew our metrics backwards and forwards, but it didn’t trip an alert threshold. So how many times was an issue missed because you weren't in the office, or because you were looking at your own screen and not dashboards at the moment? Humans are incredibly powerful, but our whole job as SREs is to make things reliable, repeatable, and scalable. We're doing…

So how many times was an issue missed because you weren't in the office, or because you were looking at your own screen and not dashboards at the moment? That's not a problem with dashboards. That's a problem with training and staffing people. because you can't scalably fix problems with SSH. The number of businesses that need to worry about scalability is vanishingly small compared to the number of businesses that d…

> That's not a problem with dashboards. That's a problem with training and staffing people.

Again, the whole point of us being computer people is that we think computers can solve problems in repeated, reliable ways. You can run a highly reliable, say, delivery-based bookstore by having a well-staffed group of well-trained human phone operators who pass messages onto human shippers. People did that (and they still do), and it worked. But we have the thesis that you can do this more efficiently and more reliably - in short, that you can deliver more business value - by using computers to automate the process.

> The number of businesses that need to worry about scalability is vanishingly small compared to the number of businesses that don't. Let's not pretend that one company's problems are the same as another's.

I do fully agree that different companies have different priorities, and in particular I think it's totally fine to rely on humans in the loop while a system is still young (or has just been redesigned) and you don't have a good codified sense of how it behaves yet. However,

1) Wall-based dashboards aren't a best practice, any more than SSHing to production servers is a best practice. It's the right thing for some cases, some of the time. I'd agree with "It's a valuable skill, and it's been useful;" I disagree with "It's so valuable you should make sure everyone does it." If you have the option of either getting good at alerts or getting good at dashboards, spend your time getting good at alerts, first. I'd say the same about infrastructure-as-code vs. SSH-to-prod (and I say this as someone who regularly SSHs to prod and is real good at single-machine old-school sysadminnery).

2) Scalability isn't about absolute size, it's about how much you can do with the resources you have. Small teams and not-yet-profitable teams need to focus more on scalability (in the sense I'm using it) because they simply can't staff enough people to cover up gaps in operability. For example, you're much better off figuring out how to set up HA and automated failover than saying "We're too small for that," setting up a weekly pager rotation with people on call 24 hours a day, and alerting them so much they can't do non-toil work (or worse, burning them out and having them find another job).

Many years ago I was on a ~4-person team at my undergrad computer club running web hosting. We ended up getting popular enough that many real university applications (course websites for submitting assignments, etc.) depended on us. Our priority was that, as students, we couldn't get paged during finals week because our academics would take priority, and yet finals week was the most critical time for the service to stay up. So we got real good at HA, at reproducible deployments and config management, etc. (I remember one time we spun up a new server during finals week - and we didn't have to do any fiddling to add it to the cluster precisely because we'd automated the provisioning process.) We had web pages with graphed metrics to inform our capacity planning, but no dashboards that anyone was expected to stare at, just alerts on full outages.

Re: Show HN: Monitoror – Unified monitoring wallboard

#94
post #66
post #49

Earlier quoted context omitted.

Yes, I understand why you'd want to focus on solving the number of open PRs. I agree that keeping that number down is good. My question is why do you want to put this on a TV screen . If you want people to focus on open PRs, tell them to open GitHub on their computers, don't tell them to look up at a TV screen periodically. Treat it like alerts: you have a list of open things to deal with and you need to get that num…

The notion with information radiators not that you tell them to look up. The notion is that people naturally look at things while walking around or when idle, so it's valuable to make important things visible. It also serves as a way to trigger and focus discussions. For example, consider the Kanban board. Here's one I built a while back: http://williampietri.com/writing/2015/the-big-board/ We loved having a physical…

That's fair - I think part of it is also that you don't really have a green vs. red state (which is a good part of what I object to in the demo presentation), you just have a general feel, and no specific state is defined as an actual problem. (And most of what you're trying to achieve is a shared sense of what's being done, which is very different from a shared sense of what's broken and needs fixing.)

Re: Show HN: Monitoror – Unified monitoring wallboard

#95

Earlier quoted context omitted.

I’ll chime in here to say we use both at work. In a NOC at a medium-sized ISP, we are getting hammered with alerts 24/7. Some are not urgent, while others need to be actioned much faster - I mean 100G transit link down is no good. We’d receive an automatic email about a large circuit going down, we’d also receive a ticket about it; sometimes people dont look at the tickets closely enough, other times people get distr…

If you're getting alerts for non-actionable events, you need to do a better job of tuning your monitors and alerts. Alerts shouldn't be sent about anything that doesn't require an action.

Well the thing is alerts are indeed for actionable events.

For example many remote locations have an on-site battery backup, which would supply power in an event of loosing commercial power. Those are actioned in terms of notifying field teams and deciding whether a specific location needs to be placed on a generator.

Imagine a hurricane disrupted commercial power grid and there are thousands of “site on battery” alerts; somewhere among them there is also an alert for OSPF down between two core switches.

Having a monitor with a large red warning saying “Link X at location Y is down!” - is a pretty effective way to not miss important notifications.

I mean playing devil’s advocate one might say “Then your alerts should have better filtering system with the important ones staying at the top of the page”... which is true. A lot of smart design features can render dashboards less relevant - however when there aren’t enough resources in a DevOps team to implement those solutions, a simple dashboard can go a long way!

Re: Show HN: Monitoror – Unified monitoring wallboard

#96
post #56
post #25

Earlier quoted context omitted.

> I can’t tell you how many times I caught an issue because I knew our metrics backwards and forwards, but it didn’t trip an alert threshold. So how many times was an issue missed because you weren't in the office, or because you were looking at your own screen and not dashboards at the moment? Humans are incredibly powerful, but our whole job as SREs is to make things reliable, repeatable, and scalable. We're doing…

You're both right. Instrumentation and alerts are vital - they leverage inhuman persistence, patience and low cost. But alerts do not substitute for a deep understanding of how your systems work. A number of the more useful "pre-crime" alerts we have derived from that - if I hadn't been elbow-deep in our systems long enough to notice certain behaviors have non-obvious second- and third-order effects downstream, we wo…

So, I'm making a bit of a subtle claim - you should absolutely be elbow-deep in your systems, and you should be understanding things well enough to build these sorts of proactive alerts, but you shouldn't rely on people being elbow-deep for noticing problems in real time.

If you're ever at the point where you catch a problem and automated monitoring didn't, that's a bug in automated monitoring. If you are really good at finding new bugs in automated monitoring and more things to monitor because you're spending your time getting a sense of how the system behaves, that's fantastic, keep doing that. (That is one of the good reasons for dashboards IMO - a bunch of data to look at when you've already realized something's wrong. Just don't use dashboards to make the decision that something must be wrong.) If you don't improve your automated monitoring and you're worried things will start failing without humans watching dashboards, then you're not solving your existing bugs.

Re: Show HN: Monitoror – Unified monitoring wallboard

#97
post #88

Earlier quoted context omitted.

I strongly disagree. I can think of a ton of reasons why a driver may need (or even be legally required) to know their speed regardless of speed limit: * when speed restricted by equipment (trailer, temporary spare, etc) * when observing advisory speeds * when observing minimum speed requirements * as a reference for judging appropriate speeds under inclement conditions * as a reference for judging appropriate accele…

Of course an alert system would have to be able to understand all those things. That's why we don't have that kind of system. A single number in isolation is rarely useful. Graphs with trends are useful. Alerts are useful. The only reason we don't have alert based speeds is because it can't get all the necessary information to make a useful alert, so we compromise by telling you the number. > as a reference for judgi…

> reference for judging appropriate acceleration/deceleration

> perfect example of why a graph would be ideal

A gauge chart, maybe? :D

But seriously, if we have a system that appropriately judges everything on my laundry list above, you probably won't need an alert system anymore because the cars will be self-driving.

Re: Show HN: Monitoror – Unified monitoring wallboard

#98

Panic used to have an iOS app that did this. It was called Status Board, and was magnificent. You could put it on an old iPad on an easel on your desk and watch everything from RSS feeds to ping statistics. In an office setting, you'd hook the 'Pad up to a cheap flat screen TV so everyone could see. Sadly, Panic discontinued it when it decided to go after the video game market.

They wrote about why they killed it: simply put, there weren't enough sales to justify further development.

https://panic.com/blog/the-future-of-status-board/

Re: Show HN: Monitoror – Unified monitoring wallboard

#99
post #91

Earlier quoted context omitted.

> Similarly, if a human found an issue and alert didn't trip, I'd count that as a bug/missing feature in the monitoring. The way that I took the GP's point was that humans can find things that haven't yet been automated, while automation can't (at least not yet, but I'd argue it'll take AGI for that.)

Yes, I agree with this. But if you're relying on humans to look at dashboards to keep your actual service up in the moment, you're not seriously committing to automating (just like if you SSH to every machine you Terraform to tweak things, you're not really committed to Terraform). What you should do is rely on automation to detect problems and alert people, and in postmortems, look at graphs and have humans say thin…

I don't think anyone is arguing that, though. Lots of things humans notice e.g. "we speculatively upped the virtual file system cache and now the service has worse throughput but better high nines response time" is not something you can really build an alert for, and neither is it something you really want an alert for -- but absolutely something that would show up on a dashboard you're intimate with.

In other words, people are not arguing replacing alerts with humans, but rather arguing that continuously looking at your metrics give you a mental model for how your system behaviour changes in response to changes in configuration, whether intentional or not.

Re: Show HN: Monitoror – Unified monitoring wallboard

#100
post #92
post #53

Earlier quoted context omitted.

Grafana needs a backend datastore, and typically prometheus exporters on each app, etc to get timeseries data that gets into the backend. This seems to be checking endpoints for data at that specific time, not really doing any complex calculations or anything of that nature.

How often do you have data that is 1) important enough to display on a dashboard 2) not important enough to record so you can track it over time ?

Build status immediately jumps to mind.
Post reply on HN