Live data from Hacker News

Reducing logging cost by two orders of magnitude using CLP

uber.com

11–20 of 107 posts

Re: Reducing logging cost by two orders of magnitude using CLP

#11
post #3

Always bugged me that highly repetitive logs take up so much space! I'm curious, are there any managed services / simple to use setups to take advantage of something like this for massive log storage and search? (Most hosted log aggregators I've looked at charge by the raw text GB processed)

ZFS as an underlying filesystem offers several compression algos and suits raw logs storage well.

Re: Reducing logging cost by two orders of magnitude using CLP

#13
Original CLP Paper: https://www.usenix.org/system/files/osdi21-rodrigues.pdf

Github project for CLP: https://github.com/y-scope/clp

The interesting part about the article isn't that structured data is easier to compress and store, its that there's a relatively new way to efficiently transform unstructured logs to structured data. For those shipping unstructured logs to an observability backend this could be a way to save significant money

Re: Reducing logging cost by two orders of magnitude using CLP

#14
post #13

Original CLP Paper: https://www.usenix.org/system/files/osdi21-rodrigues.pdf Github project for CLP: https://github.com/y-scope/clp The interesting part about the article isn't that structured data is easier to compress and store, its that there's a relatively new way to efficiently transform unstructured logs to structured data. For those shipping unstructured logs to an observability backend this could be a way to…

Does anyone have a simple explanation of how it structures the log data?

Re: Reducing logging cost by two orders of magnitude using CLP

#15
post #7

Earlier quoted context omitted.

Look, we'll just get it in this way for now, once it's live we'll have all the time we need to change the schema in the background

We don’t have a use case yet, but let’s just collect all the data and figure out what to do with it later! It’s funny how these cliches repeat everywhere in the industry, and it’s almost impossible for people to figure this out beforehand. It seems like everyone needs to deal with data lakes (at scale) at least once in their life before they truly appreciate the costs of the flexibility they offer.

The Data Exhaust approach is simultaneously bad and justifiable. You should measure what matters and think about what you want to measure and why before collecting data. On the other hand, collecting data in case what you want to measure changes later is a usually lowish cost way of maybe having the right data in advance later.

Re: Reducing logging cost by two orders of magnitude using CLP

#16
post #4
post #2

This just in, Uber rediscovers what all us database people already knew, structured data is usually way easier to compress and store and index and query than unstructured blobs of text, which is why we kept telling you to stop storing json in your databases.

Word! Storing JSON is so often the most direct and explicit way of accruing technical debt: "We don't really know what structure the data we'll get should have, just specify that it's going to be JSON"...

You can't realistically expect every log format to get a custom schema declared for it prior to deployment.

Re: Reducing logging cost by two orders of magnitude using CLP

#17
post #3

Always bugged me that highly repetitive logs take up so much space! I'm curious, are there any managed services / simple to use setups to take advantage of something like this for massive log storage and search? (Most hosted log aggregators I've looked at charge by the raw text GB processed)

ZFS as an underlying filesystem offers several compression algos and suits raw logs storage well.

Deduplication can literally save petabytes.

Re: Reducing logging cost by two orders of magnitude using CLP

#18
post #2

This just in, Uber rediscovers what all us database people already knew, structured data is usually way easier to compress and store and index and query than unstructured blobs of text, which is why we kept telling you to stop storing json in your databases.

It is pretty well known at this point by much of the industry that Uber has the same promo policy incentives as Google. That’s what happens when you ape google.
Post reply on HN