What’s Your Telemetry Data Really Trying to Tell You? ![rw-book-cover](https://img.youtube.com/vi/5IXDcywBy_0/maxresdefault.jpg) 🔗 **Source:** [What’s Your Telemetry Data Really Trying to Tell You?](https://www.youtube.com/watch?v=5IXDcywBy_0) > [!note]+ Document Notes > tags: #observability #telemetry #monitoring #automation #ai #microservices #tracing #metrics #logging > author: LeadDev > source: YouTube > reference: https://www.youtube.com/watch?v=5IXDcywBy_0 > date created: 2024-12-19 10:30 > > # 🏷️ Title: What's Your Telemetry Data Really Trying to Tell You? > <!-- deep-read:sections start --> ## 🧰 Action Inbox - [H1] Implement top-down observability focusing on critical user journeys — start with what decisions the data will inform #observability - [H2] Separate telemetry signals by time horizon to avoid alert fatigue — 12:45 #monitoring - [H3] Embed observability into daily work rituals rather than treating as separate activity — 41:23 #culture ## 🧭 Table of Contents - [[#📝 Summary]] - [[#📖 Main Content]] - [[#🗒️ Notes]] - [[#📚 References]] - [[#🗣️ Paraphrase]] - [[#📰 Newsletter]] - [[#✅ Action Items]] - [[#🧪 Hypotheses]] - [[#📊 Methodology]] - [[#❓ Questions]] - [[#🔮 Future Research]] - [[#💡 Implications]] - [[#🧠 Learning Styles Assessment]] - [[#📊 Accessibility Assessment]] - [[#🌍 DEIB Assessment]] - [[#✅ Logical Validity]] - [[#🛡️ DARVO Analysis]] - [[#🎯 Conclusion]] ### 🔗 References - [Open Telemetry Project](https://opentelemetry.io) - [EBPF Auto Instrumentation](https://github.com/open-telemetry/opentelemetry-ebpf) ## 📝 Summary - Expert panel discussion on making telemetry data meaningful and actionable rather than overwhelming - Key insight: shift from "collect everything" to decision-driven observability focused on critical user journeys - Panelists advocate for top-down approach prioritizing what decisions data will inform - Major themes include avoiding alert fatigue, implementing traces strategically, and embedding observability in daily work - AI and automation should reduce cognitive load and provide structured insights, not just collect more data ## 📖 Main Content This panel discussion features Tani (Proper Science founder), Andre Sherroh (Cosley co-founder), and Anthony (BBC senior engineer) exploring how to make telemetry data actionable rather than overwhelming. The conversation challenges the common "instrument everything" approach, advocating instead for decision-driven observability. The panelists emphasize that good observability makes systems "legible" to those responsible for them. Rather than providing all possible answers, it should highlight imbalances and guide deeper investigation. This requires understanding critical user journeys and focusing instrumentation on those paths. A key framework emerges: metrics surface problems, traces reveal location and dependencies, logs provide specific debugging context. This hierarchy helps teams avoid drowning in data by following a structured investigation path from high-level signals to specific details. ## 🗒️ Notes #### ⏱️ [00:00](https://youtu.be/5IXDcywBy_0?t=0) — [H1] Panel introduction and observability fundamentals - Key idea: Telemetry encompasses logs, traces, and metrics as key observability components - Evidence: "Metrics are usually an indicator that there's a problem somewhere. Traces would do a similar job with an emphasis of what components or where exactly you're experiencing a problem" #### ⏱️ [03:15](https://youtu.be/5IXDcywBy_0?t=195) — [H2] Shifting from more data to better decision-making - Key idea: Focus on what you're trying to achieve rather than collecting everything - Evidence: "Shifting the emphasis from more telemetry to better learning by decision-making... what are we trying to achieve and then what can we reliably see decide and then do under real constraints" #### ⏱️ [05:23](https://youtu.be/5IXDcywBy_0?t=323) — [H2] Starting with proper instrumentation from day one - Key idea: Implement observability early rather than as an afterthought - Evidence: "I wanted to start with proper instrumentation... as opposed to having it as an afterthought as I often see people struggle like oh I wanted to have better observability but it's too late" #### ⏱️ [08:30](https://youtu.be/5IXDcywBy_0?t=510) — [H1] Top-down approach to avoid alert fatigue - Key idea: Focus on critical user journeys instead of instrumenting everything - Evidence: "Think about this problem top down. What are the critical user journeys? What are the critical paths critical data flows in your system?" #### ⏱️ [10:45](https://youtu.be/5IXDcywBy_0?t=645) — [H2] Separating signals by time horizon - Key idea: Different urgency levels prevent everything appearing urgent - Evidence: "Separating signals by time horizon... if you need something that's minutes versus things that need attention over and some triage... that prevents the everything is urgent type approach" #### ⏱️ [12:45](https://youtu.be/5IXDcywBy_0?t=765) — [H1] Decision-driven dashboard creation - Key idea: Only create dashboards that inform specific decisions - Evidence: "Every time we create a new dashboard he asked me and everybody else like what decision are you going to make based on this" #### ⏱️ [15:30](https://youtu.be/5IXDcywBy_0?t=930) — [H3] Embedding observability in work rituals - Key idea: Tools must integrate into daily work cadence to provide value - Evidence: "Whatever charts dashboards... have to live inside the rituals or the operating rhythms and the operating cadence the daily use" #### ⏱️ [18:15](https://youtu.be/5IXDcywBy_0?t=1095) — [H2] Context-appropriate data presentation - Key idea: Push information where people work rather than separate dashboards - Evidence: "As a developer I don't sit in front of dashboards... push information either into a slack channel or into my IDE" #### ⏱️ [22:30](https://youtu.be/5IXDcywBy_0?t=1350) — [H1] Value of distributed tracing - Key idea: Traces reveal service dependencies critical for microservices - Evidence: "Tracing as a signal gives me an insight into how these services communicate depend with each other... if you're running a monolith it's not important" #### ⏱️ [26:45](https://youtu.be/5IXDcywBy_0?t=1605) — [H3] Strategic approach to trace implementation - Key idea: Start with high-value user journeys rather than comprehensive tracing - Evidence: "Using some good engineering practice like thin slicing and find... the right user journeys to trace... highest value things where to start" #### ⏱️ [30:20](https://youtu.be/5IXDcywBy_0?t=1820) — [H2] Logging strategy: answer key questions quickly - Key idea: Focus on operational and audit questions rather than log volume - Evidence: "It's not about quantity but about whether we can answer key operational and audit questions quickly without drowning" #### ⏱️ [33:15](https://youtu.be/5IXDcywBy_0?t=1995) — [H2] Using traces to focus log analysis - Key idea: Traces help narrow down which logs to examine in context - Evidence: "Instead of looking at every single log all over the place I am in that context looking at the logs in the time window and in the context" #### ⏱️ [36:40](https://youtu.be/5IXDcywBy_0?t=2200) — [H3] Boundary conditions as logging focus areas - Key idea: Problems often occur at system boundaries and state changes - Evidence: "Places where you see failure or problems most happen... are in the boundaries boundary crossings" #### ⏱️ [39:30](https://youtu.be/5IXDcywBy_0?t=2370) — [H1] AI requires focused, structured data - Key idea: Large data volumes make AI ineffective; context and structure are crucial - Evidence: "Sending large volumes of data to any model is almost a non-starter... minimizing the amount of information that either a human or... an AI needs to consider" #### ⏱️ [43:45](https://youtu.be/5IXDcywBy_0?t=2625) — [H2] Good observability makes systems legible - Key idea: Observability should reveal imbalances and guide investigation - Evidence: "Good observability makes the system legible to the people responsible for it... see where things are out of balance and see where you can go dig deeper" ## 📚 References - [Open Telemetry Project](https://opentelemetry.io) - [EBPF Auto Instrumentation](https://github.com/open-telemetry/opentelemetry-ebpf) - [Proper Science](https://properscience.com) - [Cosley Platform](https://cosley.com) ## 🗣️ Paraphrase - Effective observability starts with understanding what decisions your data needs to inform, not collecting everything possible - A layered approach works best: metrics reveal problems exist, traces show where and how systems interact, logs provide debugging details - Automation and AI should reduce cognitive load by providing structured, contextual insights rather than just aggregating more data ## 📰 Newsletter **Making Telemetry Data Work for You: Key Insights from Industry Experts** Are your dashboards gathering digital dust? A recent panel of observability experts shared game-changing approaches to make telemetry truly valuable. **The Decision-First Approach**: Before creating any dashboard or alert, ask "What decision will this help me make?" This simple question eliminates noise and focuses on actionable insights. **The Three-Layer Strategy**: Use metrics to surface problems, traces to understand system dependencies, and logs for specific debugging context. This hierarchy prevents data overwhelm while ensuring thorough investigation. **Embed in Daily Work**: The most effective observability tools integrate into existing workflows—Slack notifications for developers, operational dashboards for on-call teams—rather than requiring separate interfaces. Ready to transform your monitoring from overwhelming to actionable? Start by identifying your three most critical user journeys and instrument those first. Resources: [Open Telemetry](https://opentelemetry.io), [Observability Best Practices](https://opentelemetry.io/docs/concepts/observability-primer/) ## ✅ Action Items #### DevRel - Developer education: Create workshop materials on decision-driven observability approach - Documentation: Develop guides for implementing traces in microservices architectures - Community engagement: Host office hours for observability implementation questions - Content strategy: Blog series on avoiding common telemetry pitfalls #### OSPO - Developer support: Provide consultation on open source observability tool selection - Community engagement: Contribute to Open Telemetry project documentation and examples - Strategic alignment: Define KPIs for effective observability program measurement #### Community - Contributors: Create first-issue programs for observability tool improvements - Maintainers: Develop templates for observability strategy documentation - Ecosystem: Coordinate cross-project observability standards adoption #### WordPress - Core: Implement performance monitoring for critical user registration/login flows - Core Performance: Add tracing to database query optimization efforts - Meta: Improve .org API observability and error reporting - CLI: Add instrumentation commands for common debugging scenarios - Hosting: Develop cross-host observability best practices checklist ## 🧪 Hypotheses - Teams using decision-driven observability spend 40% less time investigating false alarms - Implementing traces for top 3 user journeys provides 80% of distributed system debugging value - Embedding observability in daily workflows increases tool adoption by 60% - AI-powered incident analysis requires 90% less data when properly contextualized ### 📊 Methodology - Survey teams before/after implementing decision-first dashboard approach - Measure MTTR (Mean Time to Resolution) with and without strategic tracing - A/B test embedded vs. standalone observability interfaces - Compare AI model accuracy with full vs. contextualized telemetry datasets ### ❓ Questions - How do we balance comprehensive observability with cognitive load management? - What's the optimal ratio of automated vs. human-reviewed alerts for different system types? - How can semantic conventions improve AI-powered incident analysis effectiveness? ### 🔮 Future Research - Investigate correlation between observability strategy maturity and incident response effectiveness - Explore integration of business metrics with technical observability for better context - Study impact of observability-driven architecture decisions on system reliability ### 💡 Implications - Practice: Shifts observability from reactive monitoring to proactive system understanding - Policy: Organizations need governance around what gets instrumented and why - Security: Better tracing reveals attack vectors and system vulnerabilities more clearly - Education: Engineering curricula should include decision-driven observability principles - Funding: ROI calculations should factor in reduced cognitive load, not just tool costs ### 🧠 Learning Styles Assessment Reading level estimate: 12th grade (technical audience appropriate) #### 👀 Visual learners - Present: System architecture diagrams, data flow visualizations - Improve: Add decision trees for observability tool selection, alert priority matrices #### 🔊 Aural learners - Present: 45-minute panel discussion with expert commentary - Improve: Shorter 5-minute audio summaries of key concepts #### 🗣️ Verbal learners - Present: Clear definitions of metrics/traces/logs, practical analogies - Improve: Glossary of observability terms, comparison tables #### 🧩 Kinesthetic learners - Present: Step-by-step implementation examples - Improve: Hands-on labs for trace implementation, interactive dashboard building #### 🧠 Logical learners - Present: Clear hierarchy of observability signals, decision frameworks - Improve: Flowcharts for incident investigation, ROI calculation worksheets #### 🧑‍🤝‍🧑 Social learners - Present: Panel discussion format with multiple perspectives - Improve: Discussion prompts for team observability strategy sessions #### 🧘‍♀️ Solitary learners - Present: Individual reflection on current observability practices - Improve: Self-assessment checklists, personal learning path recommendations #### 🌿 Naturalistic learners - Present: System ecosystem thinking, boundary condition analysis - Improve: Environmental impact of data collection decisions ### 📊 Accessibility Assessment #### Screen reader semantics - Present: Good heading structure, descriptive timestamps - Improve: Add ARIA labels for video controls, transcript with speaker identification #### Keyboard navigation - Present: Standard video player controls - Improve: Keyboard shortcuts for timestamp navigation #### Contrast and readability - Present: High contrast video player interface - Improve: Closed captions with customizable styling #### Text resizing and reflow - Present: Responsive video player - Improve: Ensure transcript text reflows properly at 200% zoom #### Media and captions - Present: Full transcript provided - Improve: Time-synced captions, downloadable transcript option #### Standards reference - Meets WCAG 2.2 AA for multimedia content with transcript ### 🌍 DEIB Assessment #### Cultural breadth - Present: Global technology challenges discussed (BBC, enterprise examples) - Improve: Include examples from different organizational sizes and regions #### Inclusive language - Present: Technical jargon explained, gender-neutral examples - Improve: Avoid assumptions about team structures and roles #### Neurodiversity support - Present: Clear section breaks, consistent terminology - Improve: Visual indicators for key concepts, summary bullet points #### Representation - Present: Diverse panelist backgrounds and experiences - Improve: Ensure examples don't assume specific organizational privileges #### Psychological safety - Present: Respectful discussion of common engineering challenges - Improve: Acknowledge different organizational constraints and resources ### ✅ Logical Validity #### Strong reasoning - Deductive strength: Decision-first approach logically leads to reduced noise (08:30) - Inductive strength: Multiple expert experiences support top-down methodology - Causal reasoning: Clear cause-effect between alert fatigue and unfocused instrumentation - Analogical strength: System boundary problems mirror organizational boundary challenges #### Fallacies - Appeal to authority: Heavy reliance on expert opinion without independent validation - Hasty generalization: Limited to enterprise/large organization perspectives #### Tone of voice - Overall tone: Collaborative and practical, focused on shared learning from experience ### 🛡️ DARVO Analysis --- ## Full Transcript [00:12] Hello everyone and a huge thank for<br>[00:14] joining us today for a discussion on<br>[00:16] what's your telemetry data really trying<br>[00:18] to tell you. This is a leave dev online<br>[00:21] panel discussion created in partnership<br>[00:23] with uh cows. This discussion will last<br>[00:27] roughly 45 minutes after which both<br>[00:29] myself and the panelists will head over<br>[00:30] to the lead dev slack panel to answer<br>[00:32] some of your questions.<br>[00:35] Um before we start uh could I have a<br>[00:38] short introduction uh for my panelists?<br>[00:41] So I'm going to start uh with you uh<br>[00:43] Tani.<br>[00:45] >> Sure. Hi. Um so I'm Tani. I'm founder of<br>[00:49] uh proper science and basically just uh<br>[00:52] helping organizations become more<br>[00:55] effective. Um we deal with lots of<br>[00:58] concepts around measurement and metrics<br>[01:00] observability around the work system and<br>[01:03] into the technology and um and my<br>[01:07] background is also in in engineering and<br>[01:10] computer science. So kind of came up<br>[01:11] through uh different roles in<br>[01:13] engineering and eventually looking at<br>[01:16] the broader system of organizations<br>[01:17] because I found there's lots of gnarly<br>[01:19] interesting problems to solve there.<br>[01:21] >> Cool. Nice one. Thank you very much.<br>[01:24] >> Moving on to Andre.<br>[01:26] >> Hi Andre Sherro. I'm a co-founder at<br>[01:30] Coley. Cosley is a software company that<br>[01:32] delivers a causal reasoning system. I'm<br>[01:35] one of the engineers on the team. uh we<br>[01:38] found it costly uh now more than three<br>[01:40] years ago and and we're using it at<br>[01:43] fairly large enterprises to help them to<br>[01:45] automate identify and uh prevent<br>[01:48] remediate and prevent problems in their<br>[01:51] critical uh customerf facing digital<br>[01:53] services. Prior to that uh I was a um<br>[01:56] first engineer at another company called<br>[01:59] Turonomic. Prior to that, I spent 10<br>[02:00] years at Goldman Sachs running their<br>[02:02] systems and application management<br>[02:04] engineering team. And I just find it so<br>[02:06] much fun to help people to build better<br>[02:09] operation, deliver better services and<br>[02:12] uh u building on their observability to<br>[02:15] actually make sense of out of all of<br>[02:16] their data. So<br>[02:18] glad to be here.<br>[02:19] >> Yeah, that's pretty cool. I can sense<br>[02:21] the passion all the way from here. And<br>[02:23] uh and my name is Anthony. I am a senior<br>[02:26] software engineer at the BBC. uh will be<br>[02:29] currently your host. Um I've had<br>[02:32] experiences uh with pretty much<br>[02:35] everything related to a platform of some<br>[02:37] sort, whether it's a data platform,<br>[02:38] whether it's self-service, whether it's<br>[02:40] experiments, whether it's audience, um<br>[02:43] you name it. And I've kind of been<br>[02:44] involved in this. Um I'm really pleased<br>[02:47] to be here today. And the topic we're<br>[02:49] going to tackle is drum roll or sorry<br>[02:53] more specifically telemetry data. So<br>[02:56] when we spoke about telemetry data, I<br>[02:58] think what people what comes into<br>[02:59] people's minds are like logs, traces and<br>[03:02] the metrics of like everyday life and<br>[03:04] all of which are like key components of<br>[03:06] uh what we assess as to be the<br>[03:09] observability of your engineering<br>[03:11] product. In broad terms, metrics are<br>[03:13] usually an indicator that there's a<br>[03:14] problem somewhere. Traces uh would do a<br>[03:17] similar job with an emphasis of what<br>[03:19] components or where exactly you're<br>[03:21] experiencing a problem. And last but<br>[03:23] certainly those lists um logs uh they<br>[03:26] often consult them in order to debug or<br>[03:28] audit our services. But any of those<br>[03:31] three activities which are part of the<br>[03:33] telemetry data can quickly turn into a<br>[03:36] hassle whether they are automated or not<br>[03:38] and combined uh they can be incredibly<br>[03:40] useful. However, there are many<br>[03:42] pitfalls. Have you ever heard of death<br>[03:44] by dashboards, alert fatigue, finding a<br>[03:48] needle in a hay stack, and my favorite<br>[03:50] as a junior developer when I looked at<br>[03:52] my colleague and asked, "How do I access<br>[03:53] the logs?" And he started by, "Let me<br>[03:56] get you on the system. Do you have the<br>[03:58] right uh do you have the rights to<br>[04:00] actually do that?" And then we do you<br>[04:03] know how to SSH into a box? But fear<br>[04:06] not, today I have this exciting panel<br>[04:08] with me and um we're going to start with<br>[04:11] question one. So amazing panel, what is<br>[04:14] the latest thing that you have done that<br>[04:17] made an improvement or a difference in<br>[04:19] your team company's telemetry data? Uh<br>[04:22] for example, uh something very simple. I<br>[04:24] implemented a log retention policy<br>[04:26] across our cloud estates and I saved up<br>[04:29] quite a bit of money and reduced noise<br>[04:31] when aggregating logs. So who wants to<br>[04:34] take this one?<br>[04:39] >> I guess I could take this one.<br>[04:41] >> Yeah, please. Yeah.<br>[04:42] So not a very long answer to this one,<br>[04:45] but I think<br>[04:46] >> that's good.<br>[04:46] >> Um the approach in terms of the the<br>[04:50] something that have improved was<br>[04:52] shifting the emphasis from more<br>[04:53] telemetry to better learning by<br>[04:56] decision- making better learning and<br>[04:58] decision- making. So it's kind of um<br>[05:03] change shifting the approach from<br>[05:04] collect all the things to what are we<br>[05:07] trying to achieve and then what can we<br>[05:09] reliably see decide and then do under<br>[05:12] real constraints. So I did that when in<br>[05:15] one of my last engagements in the large<br>[05:17] corporation with several leadership<br>[05:18] teams helping them think through um what<br>[05:21] are the right things to measure in their<br>[05:23] in their tech environment.<br>[05:25] >> Yeah, that's nice. That's really nice. I<br>[05:27] think yeah, people often just jump in<br>[05:29] without really knowing what they're<br>[05:30] looking for. They just like they just<br>[05:32] have this because we must have it,<br>[05:34] right? It's observability, but could be<br>[05:36] a bit more<br>[05:39] refined. Um Andre<br>[05:44] >> um well I think that uh one of the most<br>[05:46] fun was as we were building our current<br>[05:48] uh software offering uh we're offering<br>[05:50] it as a SAS is that I wanted to start<br>[05:53] with proper instrumentation that are<br>[05:55] helping us to actually operate this SAS<br>[05:58] as they they um um as a number of<br>[06:00] customers grow and volume of data grows.<br>[06:03] Uh so it was good to start with that<br>[06:04] from day one as opposed to having it as<br>[06:06] an off. often see people struggle like<br>[06:09] oh I wanted to have better observability<br>[06:11] but it's too late because I'm already in<br>[06:12] business I don't have time to do this so<br>[06:15] I'm just glad that we were able to do<br>[06:16] this and continue to to u instrument all<br>[06:20] the components in the way they interact<br>[06:21] with each other so it's easy for me to<br>[06:23] see things that are working or not<br>[06:25] working in our s things that are not<br>[06:26] working in our customers environment how<br>[06:28] data is flowing through the system I'm<br>[06:30] just really proud of what we built so<br>[06:32] far to demo it to all of our other<br>[06:34] customers like this is how you should do<br>[06:36] Thanks.<br>[06:38] >> Yeah. Yeah, you're absolutely right. I<br>[06:39] think that too often people fall into<br>[06:41] like the the pitfall of just saying,<br>[06:42] "Oh, yeah, it's it's an afterthought or<br>[06:44] I didn't think about it. Oh, it's a bit<br>[06:46] late. I wish I'd known and stuff." And<br>[06:48] and that is great that you know that you<br>[06:50] two have this kind of approach that that<br>[06:51] can make people think perhaps to to get<br>[06:55] things um going earlier. Um, in our<br>[06:58] quest to make monitoring meaningful and<br>[07:01] relevant leveraging that telemetry data,<br>[07:03] how do you, dear panelists, avoid alert<br>[07:07] fatigue or worse, death by dashboard?<br>[07:10] Andrew, I think you have something to<br>[07:11] say about that.<br>[07:12] >> Yeah, I think so. So, so I think that<br>[07:15] what I often see as I work uh with a<br>[07:18] number of customers over the past couple<br>[07:19] of years is that people think about<br>[07:20] like, let me just instrument everything,<br>[07:23] collect everything, and then I'll figure<br>[07:25] out what I'm going to do with this data.<br>[07:27] And then it becomes all the things that<br>[07:29] you mentioned about that by you know<br>[07:31] dashboards. Uh so so what I am driving<br>[07:34] internally as well as across our<br>[07:35] customers is to think about this problem<br>[07:37] top down. What are the critical user<br>[07:39] journeys? What are the critical paths<br>[07:41] critical data flows in your system? How<br>[07:44] do you focus on instrumenting, observing<br>[07:48] and exposing those things as opposed to<br>[07:50] an army of data? And how do you also<br>[07:52] minimize the data so that you only<br>[07:54] collect things that are relevant to your<br>[07:55] critical journey? Um, so really thinking<br>[07:58] taking a top down approach to<br>[07:59] observability rather than a bottoms up<br>[08:01] approach.<br>[08:02] >> Nice. Ti, do you have anything to add?<br>[08:06] >> Yeah, one one other thing that popped to<br>[08:08] mind was this idea of time horizon. So<br>[08:11] separating signals by time horizon too.<br>[08:15] So you know if you need something that's<br>[08:18] um minutes you know to know something is<br>[08:21] broken right away uh versus things that<br>[08:24] need attention over and some triage and<br>[08:27] some thought maybe trending information<br>[08:30] and then<br>[08:31] >> maybe improvement type data trend those<br>[08:34] are more trend and systemic type fix<br>[08:36] type things. So that prevents the<br>[08:39] everything is urgent type<br>[08:42] >> uh approach which is one of the things<br>[08:45] that contributes to the fatigue.<br>[08:47] >> Yeah, you're absolutely right. That is a<br>[08:49] very good point like you know we tend to<br>[08:50] look at everything just all at once or<br>[08:52] or we don't we create an alert as<br>[08:54] engineers but we don't really prioritize<br>[08:56] those alerts. We just have to look at it<br>[08:58] and then we just about where some<br>[09:00] prioritization beforehand could actually<br>[09:02] really help you just like focus on what<br>[09:05] what needs to be looked at. Well, this<br>[09:06] this just leads nicely to the the<br>[09:08] question number three, which is more of<br>[09:10] a work culture question, but like again,<br>[09:13] often as engineers, we we build<br>[09:15] dashboards like we build alert, you<br>[09:17] know, um we we build them just because<br>[09:21] it's something that we think it's a must<br>[09:22] have into organization, but we don't<br>[09:25] really look at them as much as we<br>[09:26] should. Once it's being built, it kind<br>[09:28] of like sits there. The alert sits<br>[09:29] there. You know, it's there, you tested<br>[09:30] it, it worked, but you don't really<br>[09:32] iterate on it. And we're trying to<br>[09:35] surface observability to stakeholders<br>[09:36] without actually checking if they<br>[09:38] understand the data and the logic that<br>[09:40] we as engineers put on display. And I<br>[09:42] think Tann you did uh we spoke earlier<br>[09:45] and you did mention how you you managed<br>[09:47] to bridge that gap into your approach.<br>[09:50] >> Yeah. From<br>[09:53] from a standpoint of thinking of that<br>[09:56] the service and product that you're<br>[09:58] providing. Mhm.<br>[10:00] >> So in terms of<br>[10:03] not always just trying to guess what<br>[10:05] people need to see<br>[10:06] >> and say hey here's here's what we've<br>[10:08] created now it's going to solve all your<br>[10:10] problems like and let me train you how<br>[10:12] it works and all that kind of thing. So<br>[10:16] liazing collaborating<br>[10:19] with the stakeholders understanding what<br>[10:22] are the decision- making that this data<br>[10:24] is informing again time horizons can<br>[10:27] come into play. Is this trend<br>[10:29] information? Is this something's broken<br>[10:32] right now and I need an alert kind of<br>[10:34] information or is it something that's a<br>[10:35] little bit more strategic long-term<br>[10:37] improvement type?<br>[10:39] Um what like what is what is this data<br>[10:42] informing? Um because I remember reading<br>[10:46] a white paper a long time ago that said<br>[10:47] that um if if a met if some data or<br>[10:51] measures are not informing some kind of<br>[10:53] decision-m they could be waste. So that<br>[10:55] could be that's one place to start. So<br>[10:58] there's that collaboration of like what<br>[11:00] is the context? What is the work? What<br>[11:03] is the what what is infor what are these<br>[11:05] this what is is this information<br>[11:07] informing what is it supporting<br>[11:10] um to what end? And then you know taking<br>[11:12] a stab at that based on what you hear<br>[11:14] maybe back briefing here's what I heard<br>[11:16] here's what we understand here's a<br>[11:17] sample and iterating through that in<br>[11:20] collaboration with stakeholders. I think<br>[11:22] that's really important. So almost like<br>[11:23] kind of a product thinking a product<br>[11:25] management um product development hat um<br>[11:30] while while doing this uh is really<br>[11:32] helpful I think necessary in order to<br>[11:34] meeting the needs of those stakeholders.<br>[11:37] >> Yeah. Yeah. I absolutely love like that<br>[11:39] bit when you say um yeah if the data<br>[11:41] doesn't serve a purpose why are we<br>[11:42] keeping it why are we storing it? You<br>[11:44] know Andre what do you think about that?<br>[11:47] So um our my the founder of uh Kosley as<br>[11:51] well as the founder of the previous<br>[11:52] company Turbino make sure every time we<br>[11:55] create a new dashboard he asked me and<br>[11:58] everybody else like what decision are<br>[12:00] you going to make based on this<br>[12:02] >> and before you create the dashboard ask<br>[12:04] yourself like what is it I'm actually<br>[12:06] going to take what action I'm going to<br>[12:07] take with this and it's just a really<br>[12:09] good way to think about this like is<br>[12:11] this going to help me make a decision<br>[12:12] and if not don't even create action or<br>[12:15] the report and uh it you know it stuck<br>[12:18] with me. So I think about this every<br>[12:20] time I you know do I collect this data?<br>[12:22] What am I going to do with this?<br>[12:24] >> I think it's a good way to help.<br>[12:26] >> I've thought of one more thing to that<br>[12:28] line is that the the whatever charts<br>[12:31] dashboards<br>[12:32] um their tools they have to live inside<br>[12:35] the the rituals or the operating rhythms<br>[12:38] and the operating cadence the daily use<br>[12:41] the daily cadence of work. So that<br>[12:44] context I think is really important part<br>[12:46] of the thing that's really important<br>[12:47] like what is how does work actually<br>[12:49] happen and because these are kind of<br>[12:52] going to slot in there versus just being<br>[12:54] something you walk by and ignore.<br>[12:56] Hopefully there's something that you're<br>[12:57] actually using and providing value.<br>[13:00] >> Yeah, that makes sense. Is there like um<br>[13:02] do you reckon perhaps sometimes some<br>[13:06] dashboards like um I remember setting up<br>[13:08] a dashboard for for all of my um data<br>[13:11] analysts that were using like um the<br>[13:12] data warehouse I was working on and it<br>[13:15] was all about like the trends like you<br>[13:16] know the heat map of queries like when's<br>[13:18] the best time to fire a query without<br>[13:20] you know for like not competing with<br>[13:22] resources CPU usage like a lot of like<br>[13:24] um information is going how many<br>[13:26] billions of rows are being scanned etc<br>[13:28] and and it wasn't like a graphana kind<br>[13:31] of a little bit complexish looking<br>[13:33] dashboards. Do you think that sometimes<br>[13:35] like the way you present that data can<br>[13:37] affect how people are keen to engage<br>[13:40] with it?<br>[13:44] >> Oh, definitely. Uh I think that's part<br>[13:47] of the feedback to to to to gather and<br>[13:51] to take. And I think um sometimes<br>[13:57] progressively elaborating is better than<br>[14:00] starting with a lot and progressively<br>[14:03] add in as needed. Uh is a good is a good<br>[14:06] way to<br>[14:09] >> hit them try to hit as close to the mark<br>[14:11] as you can on what what uh what is<br>[14:14] useful and what is easy to read and what<br>[14:16] is engaging.<br>[14:17] >> Yeah, fair point. Fair point. and you<br>[14:19] Andre what's your most what do you think<br>[14:22] your stakeholders find the most engaging<br>[14:23] visually<br>[14:25] >> so um I think that what T said is really<br>[14:28] important to fit into how people operate<br>[14:30] and how people work there are teams that<br>[14:32] I'm working with that are actually<br>[14:34] directly primarily responsible for<br>[14:36] operations and they are sitting in front<br>[14:37] of a a dashboard and and now integrating<br>[14:40] into their dashboard is probably not<br>[14:42] overwhelming them but relevant data into<br>[14:44] their dashboards in the context of you<br>[14:46] know I'm operating this application this<br>[14:48] is an addition piece of information<br>[14:49] that's useful in that context is useful<br>[14:52] rather than like I create another<br>[14:53] dashboard for you whenever you want to<br>[14:55] go there and people will not um but but<br>[14:58] then as a developer I don't sit in front<br>[15:01] of dashboards um so do how do I uh push<br>[15:05] information either into a slack channel<br>[15:08] or into my IDE which then links me back<br>[15:11] to okay to be able to know more about<br>[15:14] this this is the link to either a piece<br>[15:16] of information or to a dashboard if you<br>[15:18] will um so so those are very different<br>[15:21] use cases that they may lead you to the<br>[15:23] same background information but in the<br>[15:25] place where I live otherwise if nobody<br>[15:28] looks at it it's not much use<br>[15:32] yeah absolutely absolutely and and<br>[15:34] talking about these types of information<br>[15:37] um there's one that I personally<br>[15:38] struggle with a little bit so I'm going<br>[15:40] to play the devil's advocate here is is<br>[15:42] traces I found in the past traces are<br>[15:45] sometimes a bit time conssuming to<br>[15:47] implement meant and by the way that's<br>[15:50] the question number four and um for<br>[15:52] those you know like me we don't really<br>[15:54] believe I mean there is a use case for<br>[15:56] it but I just feel like the effort<br>[15:58] needed uh to add that to my telemetry uh<br>[16:02] especially when I'm using lots of like<br>[16:04] different components and I have um some<br>[16:07] of his information given to me by like<br>[16:08] let's say a cloud provider why would I<br>[16:10] go through the trouble of adding it<br>[16:11] myself could you could you convince me<br>[16:13] otherwise Andre can you could you make<br>[16:15] me use it<br>[16:16] >> use it<br>[16:16] >> absolutely Yeah. So, so, so um um I'm<br>[16:21] obviously very interested and involved<br>[16:24] in the open telemetry community. I'm one<br>[16:25] of the contributors. One of the projects<br>[16:28] that I'm working fairly closely with it<br>[16:30] is the OBI project, EBPF based auto<br>[16:33] instrumentation. And the point of this<br>[16:35] is to reduce that burden so that you<br>[16:37] don't feel overwhelmed by the amount of<br>[16:39] work that you need to do to u instrument<br>[16:42] your application but generating traces<br>[16:44] for example. But the more important part<br>[16:46] is what is the benefit? Why is this<br>[16:48] important in the first place? Because<br>[16:50] that's really an offset to okay do I<br>[16:52] need to do something or or something. Uh<br>[16:54] I think that as I am operating<br>[16:56] developing and operating complex<br>[16:58] distributed microservices<br>[17:00] um tracing as a signal gives me an<br>[17:04] insight into how these services<br>[17:06] communicate depend with each other. Some<br>[17:09] of those services may be bespoke<br>[17:11] business logic that I wrote. Some of<br>[17:13] those services may be cloud managed<br>[17:16] services.<br>[17:17] If I only monitor them independently<br>[17:20] through logs and metrics, I don't know<br>[17:22] who calls who, who depends on what. The<br>[17:25] failure of this will cause errors or uh<br>[17:28] latency uh someplace else. Traces are a<br>[17:32] key uh signals to be able to understand<br>[17:36] that dependency. um if you're running a<br>[17:39] monolith it's not important but I think<br>[17:41] nowadays an increasingly larger number<br>[17:43] of applications and teams that are<br>[17:45] arcting applications are developing<br>[17:48] distributed microservices that are not<br>[17:50] just<br>[17:51] broken down into components but they're<br>[17:53] actually data is flowing through AC<br>[17:55] across different applications maybe<br>[17:57] across different lines of business<br>[17:59] relying on external data providers and<br>[18:02] to understand the data flows between<br>[18:04] across them and then based on that to be<br>[18:07] to reason about the system behavior.<br>[18:08] Traces are key and as long as we can<br>[18:11] make it easy and cheap for people to<br>[18:13] instrument the application, people will<br>[18:15] see the benefit or realize the benefit.<br>[18:19] >> Okay. Okay. I'm I'm partly convinced.<br>[18:20] Johnny, do do you think I don't know how<br>[18:22] do you feel? Do you join Andrea on this<br>[18:24] quest for like implementing traces or<br>[18:26] are you a bit like me just sitting on<br>[18:28] the fence still wondering like, okay,<br>[18:30] should we do it? Shall we not do it?<br>[18:32] What would you recommend?<br>[18:34] I think uh<br>[18:38] I'm probably a little bit of both<br>[18:41] depending on the scenario. by such a<br>[18:43] simple<br>[18:44] >> but what but what's on my mind as I'm<br>[18:46] thinking when I've been thinking about<br>[18:48] traces is and I'm thinking of like the<br>[18:50] comp like the system systems thinking or<br>[18:52] the system complex system thinking hat<br>[18:54] is<br>[18:56] um the the time consuming objection<br>[18:59] which could be like more like the<br>[19:00] pragmatic thinking like we need to get<br>[19:03] things done and and and<br>[19:06] you're doing this for the sake of more<br>[19:08] like to generate learning which is a<br>[19:10] more of an epistemic versus pragmat<br>[19:12] pragmatic approach approach. So I was<br>[19:14] thinking using some good engineering<br>[19:15] practice like thin slicing and find you<br>[19:18] know figuring out the right user<br>[19:21] journeys to trace in through the system<br>[19:23] with and to get where you need the key<br>[19:25] dependencies like think through those<br>[19:27] things I think what are those the high<br>[19:28] high value highest value things where to<br>[19:30] start with traces that I'm thinking of<br>[19:33] those things to over where to overcome<br>[19:35] the time just the time consuming<br>[19:36] objection because<br>[19:38] >> there's a like things that take too a<br>[19:40] time often get objected to, but they're<br>[19:42] often worth it because that time you<br>[19:44] spend increases learning which saves you<br>[19:46] time elsewhere. You got to pay the time<br>[19:49] somewhere.<br>[19:50] So, I was thinking like what could be<br>[19:52] the analysis you put into what are the<br>[19:54] traces to build and where to start and<br>[19:57] that's kind of what came to mind.<br>[20:00] >> Yeah, I can see that Android nodding and<br>[20:02] uh and yeah, I'll have to lend to the<br>[20:04] both of you like you are right. Yeah.<br>[20:07] Okay. I will try and push my team to<br>[20:09] implement some more traces now.<br>[20:11] Thank you for that.<br>[20:13] >> Happy to help. By the way,<br>[20:15] >> if there is any open source project that<br>[20:17] we could, you know, give advice on to<br>[20:19] you and to anybody else in the audience.<br>[20:21] By the way, I'm I'm really passionate<br>[20:22] about making this easy and to Tion's<br>[20:24] point, valuable. Um, you know, this is<br>[20:28] regardless of the business that we are<br>[20:29] in, I think it's it's going to help us<br>[20:31] to understand our systems and think<br>[20:33] about their behavior.<br>[20:36] >> Yeah. Yeah. Absolutely. No, I mean, I'm<br>[20:37] I'm all in favor. I think this is this<br>[20:39] is a great invitation to to collaborate.<br>[20:43] We're now going to move on to another<br>[20:45] part of uh the um telemetry data which<br>[20:49] are the logs. Very often the logs are<br>[20:51] considered as is for me the backbone of<br>[20:53] any engineering product because it can<br>[20:55] tell you a very useful story either for<br>[20:57] auditing or for debugging. But then<br>[21:00] there's like so many questions around<br>[21:02] them which I'm going to ask both of you<br>[21:03] like you know how many logs or how much<br>[21:05] logs is enough logs? uh how do you best<br>[21:07] store and organize them? How do you<br>[21:09] avoid the rush and door situation of<br>[21:11] logs when like one logs from let's just<br>[21:13] say an Apache airflow just takes you to<br>[21:15] another logs with another pipeline that<br>[21:16] was broken down somewhere else and then<br>[21:18] to another logs because it was something<br>[21:20] else broken down. So how how do we so<br>[21:24] let's just sorry let me go back to that<br>[21:25] first uh question that has how much logs<br>[21:28] or how many logs is enough logs<br>[21:30] according to either of you who wants to<br>[21:32] go first<br>[21:37] >> oh you're so polite but it's amazing<br>[21:42] >> I don't know the answer to that question<br>[21:44] uh how much long is it I don't know if<br>[21:47] it's about quantity but about whether we<br>[21:50] can answer key operational and audit<br>[21:53] questions quickly without drowning.<br>[21:57] >> So yeah, that's kind of what I'm<br>[21:59] thinking. And then um the you know logs,<br>[22:04] you know, metrics tell you where<br>[22:07] something is<br>[22:09] um in general generally tell you<br>[22:12] something is wrong and logs give you<br>[22:15] some local facts. And so just figuring<br>[22:17] out um the right again using that<br>[22:21] analysis the same you would do for like<br>[22:24] traces analysis for what what the<br>[22:26] logging needs to accomplish and and<br>[22:28] therefore back into<br>[22:31] what are the right things to collect and<br>[22:32] that gives you um<br>[22:36] uh that then you'll end up with with<br>[22:39] what you need. I think um I think I<br>[22:41] think that's that's what I've got right<br>[22:43] now on this.<br>[22:44] >> Yeah, of course. Of course. Andrew, do<br>[22:46] you want to jump in?<br>[22:46] >> Yeah. Yeah, absolutely. Exactly along<br>[22:48] those lines. So, what we do today in our<br>[22:51] own business and I'm promoting elsewhere<br>[22:52] is that traces help you understand the<br>[22:55] system behavior and to see where you<br>[22:59] need to focus. Now once you say like<br>[23:01] okay I need to focus on this service it<br>[23:03] makes sense to drill down and say like<br>[23:04] okay in this service that is apparently<br>[23:07] causing all these degradations what are<br>[23:09] the logs especially what are the error<br>[23:12] and critical you know logs maybe some<br>[23:14] warnings um that now understands<br>[23:17] specifically what's happening within<br>[23:18] that service. So I'm basically using the<br>[23:22] understanding of the system by the way<br>[23:24] through tracing to narrow where I need<br>[23:26] to focus and then instead of looking at<br>[23:29] every single log all over the place I am<br>[23:31] in that context looking at the the the<br>[23:35] logs in the time window and in the<br>[23:37] context and especially the ones that are<br>[23:39] critical to to then reason about it and<br>[23:42] and what we're doing in our own uh<br>[23:44] product is then to say that instead of<br>[23:46] like let's say I want to apply some<br>[23:48] generative TVI to automatically<br>[23:51] remediate a problem if I were to send<br>[23:53] all of my high volume logs to any model,<br>[23:57] you know, it would be either expensive<br>[23:59] or non feasible to begin with. But if I<br>[24:01] can narrow it down to like this is<br>[24:02] service, here's the five lines of logs<br>[24:04] that I'm actually uh uh observed, I come<br>[24:08] up with pretty good answers of like<br>[24:09] okay, I think that you know improve uh<br>[24:12] you know locking in your code or improve<br>[24:14] the the memory management in your code<br>[24:16] or avoid this null pointer exception in<br>[24:19] your code and and I really only needed<br>[24:21] like five lines of logs but I need to<br>[24:23] know where to look and in what context<br>[24:24] and when.<br>[24:26] I see like a lot of people often like<br>[24:29] you know describe telemetry data to me<br>[24:31] as like you know like in that order like<br>[24:32] metrics to surface something traces to<br>[24:36] know where it is being surfaced and and<br>[24:38] logs to actually as a combination of the<br>[24:41] two above you've narrowed down to like<br>[24:43] exactly what type of logs you need. So<br>[24:45] are we in agreement that's this is the<br>[24:46] way you should look at it like almost<br>[24:48] like a like a ski slope or something.<br>[24:51] >> Okay. One thing that came to mind from<br>[24:53] an organizational perspective and I I'm<br>[24:55] not sure maybe get you guys's opinion on<br>[24:57] this is in an organizational perspective<br>[25:01] when we're we're looking across a an<br>[25:03] organizational system the places where<br>[25:05] you see failure or problems most happen<br>[25:09] or are in the boundaries boundary<br>[25:11] crossings bound like the boundary<br>[25:13] conditions and the boundary agreements<br>[25:15] are what you need and I think that<br>[25:16] mirrors in systems as well and that<br>[25:18] might be a place as well for for logging<br>[25:20] looking at boundary classes<br>[25:22] uh crossing state change type areas,<br>[25:25] places where you know that you can often<br>[25:28] um have signs of and have have issues.<br>[25:32] >> Yeah, totally. I I hear this almost in<br>[25:34] every one of our customer conversations<br>[25:37] that that I am depending on these<br>[25:39] external services that are are either<br>[25:41] completely outside of my business or<br>[25:44] they are in my business but they're<br>[25:45] operated by a different team that I<br>[25:46] don't have any control over it. And it's<br>[25:49] like<br>[25:51] >> I mean I can't say that the person never<br>[25:53] has a problem but often you know a good<br>[25:55] chunk of their problems is caused by<br>[25:57] something else. So, so to be able to<br>[25:59] identify that this external service is<br>[26:02] causing degradations in my service and<br>[26:05] then to be able to say okay now I'm only<br>[26:08] going to look at the client logs that<br>[26:10] are interacting with that service is<br>[26:12] helping me to see what do I need to do<br>[26:14] is it something that I can improve or<br>[26:17] can I point the third party provider or<br>[26:20] the other lines of business other<br>[26:21] application owner to say that like I<br>[26:23] think that you need to do something<br>[26:24] about this<br>[26:26] >> this part of your service. Um, so and<br>[26:29] and tion, you're absolutely right. I<br>[26:30] think that not that it's obvious when<br>[26:32] it's all under your control, but<br>[26:34] crossing boundaries is clearly where<br>[26:36] things become hairy. And I think with<br>[26:38] microservices, distributed systems, data<br>[26:41] being processed through multiple<br>[26:43] providers is becoming more prevalent.<br>[26:46] >> Yeah.<br>[26:47] >> Hence, tracing is important. But in<br>[26:50] general, ju just just just go back to it<br>[26:53] like you find a way to sneak that one<br>[26:54] in, you know. Absolutely.<br>[26:58] No, you are absolutely right. I mean I<br>[27:00] do see I'm going to take like the BBC<br>[27:02] example of like more like of an internal<br>[27:04] like um communications or sorry between<br>[27:07] the logs and all those like metrics like<br>[27:09] we have a lot of dependencies between<br>[27:11] our products and obviously like for<br>[27:14] example the I player front end team and<br>[27:15] the I player backend team and the I<br>[27:17] player data team like we all are<br>[27:18] separate entities operating according to<br>[27:22] like you know legacy kind of like<br>[27:24] challenges and and yeah and sometimes we<br>[27:27] are just like pulling our hair apart and<br>[27:28] just thinking<br>[27:29] Oh, you sending this information through<br>[27:31] the logs, but we have like kind of like<br>[27:33] no way of actually making use of it or<br>[27:36] we have to go and surface some some<br>[27:38] other problems to another dependent team<br>[27:40] which they had no idea they've been<br>[27:41] having these issues. It's um it's a bit<br>[27:44] challenging but with good communication<br>[27:47] and and with just like making sure you<br>[27:49] iterate for the better uh there is<br>[27:51] nothing you can solve. But we the the<br>[27:54] way we might not use traces is because<br>[27:56] we have such determinant ring fence<br>[27:58] teams that it basically means that if<br>[28:01] there is a problem in that area then we<br>[28:03] know this team and we'll be looking at<br>[28:04] it somehow and we don't need traces for<br>[28:06] that respect but it just depends on how<br>[28:09] how people are formulated. So how teams<br>[28:12] are created within an organization.<br>[28:17] >> Oh that was nice. Uh thank you for that<br>[28:20] chat. Um now we're going to move on to<br>[28:24] question number six.<br>[28:27] Um right given the sheer volume of data<br>[28:30] sources available um you know in terms<br>[28:33] of like metrics log etc and all the data<br>[28:35] in the world you can think of in the era<br>[28:38] of big data uh we often see automation<br>[28:41] as a tool uh being used in that field to<br>[28:44] to gather and aggregate those data. But<br>[28:48] to what end? So again like this this<br>[28:50] question is more about like like in<br>[28:52] testing you don't automate everything<br>[28:54] you don't want to have 100% automation<br>[28:55] coverage that's impossible same you<br>[28:57] can't have 100% data gathering but so<br>[29:00] how would you recommend using automation<br>[29:02] in your telemetry approach and can the<br>[29:05] rise of AI help in this setting do you<br>[29:07] reckon?<br>[29:09] >> Can I start with you Andre?<br>[29:11] Yeah. So, um, two things. I think I kind<br>[29:14] of alluded in my previous point that<br>[29:17] >> sending large volumes of data to any<br>[29:20] model is almost a non-starter. If I were<br>[29:23] to take every one of my alerts and send<br>[29:26] it as a prompt, uh, I would probably not<br>[29:29] be able to figure out what's going on. I<br>[29:30] get a half like 50% good hallucinations,<br>[29:34] 50% not so good hallucinations, and it<br>[29:37] would cost me a lot of money. So I think<br>[29:38] that everything that that Tian said<br>[29:40] earlier about you know what is the<br>[29:42] context um you know what part of the<br>[29:44] business flow this is and minimizing the<br>[29:47] the the amount of information that<br>[29:50] either a human or in the case in this<br>[29:52] case an AI needs to consider and provide<br>[29:56] that context around this so that instead<br>[29:58] of just looking at like a single alert<br>[29:59] you say like okay data is flowing<br>[30:01] through these systems here is the metric<br>[30:04] that triggered this here's a couple of<br>[30:05] final logs I think that is actually both<br>[30:09] a more focused smaller amount of data<br>[30:13] that can be uh genuinely processed<br>[30:15] through um uh a a model and to then<br>[30:19] drive um uh automation possibly all the<br>[30:23] way to creating a PR to fix a problem if<br>[30:25] it also has access to the code has<br>[30:28] access to a coding agent. Um, I'm I'm<br>[30:30] very optimistic about this this flow<br>[30:33] becoming increasingly more uh uh<br>[30:36] automated. Uh, you could argue to what<br>[30:39] extent you need a human in the loop, but<br>[30:41] hopefully increasingly less so or maybe<br>[30:44] decreasing less so, but but I think that<br>[30:46] that that is helpful. One other key<br>[30:48] point, I'm sorry I'm taking long um is<br>[30:51] is that this what I think is also<br>[30:54] important is that<br>[30:56] >> to the extent that the data can be<br>[30:58] better structured<br>[31:00] semantically defined helps a lot in any<br>[31:04] model to say that like okay this is<br>[31:06] coming from a database this is coming<br>[31:08] from message broker uh you know this is<br>[31:12] a gRPC method that I'm invoking uh this<br>[31:16] is the client this is the server um what<br>[31:19] the open telemetry project is helping<br>[31:22] with is to lay down some of the<br>[31:24] foundations about these semantic<br>[31:26] conventions that within a particular<br>[31:28] context text helps you to say like okay<br>[31:30] this is what I'm talking about this is<br>[31:33] the type of the thing that I'm dealing<br>[31:34] with which then again helps both a human<br>[31:38] or a process or an AI agent to more uh<br>[31:42] efficiently correctly uh automate<br>[31:45] actions based on that information. So<br>[31:48] I'm very passionate about you know<br>[31:50] driving not just open telemetry semantic<br>[31:52] conventions but in in driving a a a uh<br>[31:56] definition a top down definition of of<br>[31:58] what is the system that we are dealing<br>[32:01] with and how the observative system the<br>[32:02] observative signals are describing that<br>[32:04] system semantically.<br>[32:08] >> Wow<br>[32:09] it's a that's a pretty good one. Um I<br>[32:12] know it's hard to follow but Tani do you<br>[32:13] have something good?<br>[32:15] >> I don't think I can add too much to<br>[32:17] that. I think I I would summarize from<br>[32:20] the standpoint from uh<br>[32:23] >> of at least just what I've thought about<br>[32:25] on this topic in terms of automation<br>[32:28] um is that the and it we've said this in<br>[32:32] in various ways in the past you know<br>[32:34] half hour or so<br>[32:36] >> I don't think the automation should<br>[32:37] exist again just to collect more<br>[32:40] telemetry<br>[32:41] >> so<br>[32:42] >> it's it's going to I think it should be<br>[32:45] a helper for shortening time to<br>[32:47] orientation, protecting attention,<br>[32:51] turning incidents into learning, keeping<br>[32:54] that at the forefront is important for<br>[32:55] any automation um that you create. Um<br>[32:59] and the AI AI could then help as maybe a<br>[33:01] sense making assistant in some respects.<br>[33:04] So correlating some signals, maybe<br>[33:06] summarizing what's changed, maybe<br>[33:08] proposing queries or drafting<br>[33:12] stakeholder updates kind of thing. But<br>[33:14] it has to be grounded in evidence. it<br>[33:16] has to keep humans accountable for<br>[33:17] decisions. So I think um it's uh you<br>[33:22] know wise use of the tools for<br>[33:24] automation and for helping with analysis<br>[33:27] kind of thing.<br>[33:30] >> Nice. That's very nice. I mean what what<br>[33:31] I usually say is that you know like if<br>[33:33] you can't follow up on someone just<br>[33:34] challenge them. So I'm going to<br>[33:35] challenge Andre because there's nothing<br>[33:37] else I can do at this point. You you've<br>[33:38] covered it all up. is so according to<br>[33:41] you, do you reckon like you know AI in<br>[33:44] the process of like to you as well<br>[33:45] Channy um AI in the process of like you<br>[33:48] know like capturing those logs and if<br>[33:50] you use them like you know you use like<br>[33:51] labelled data like you were saying you<br>[33:53] know um trying to refine it to save on<br>[33:56] processing cost training your model etc.<br>[33:59] Are you using it to then take some<br>[34:01] actions when the problem arise or are<br>[34:04] you using to maybe are you trying to<br>[34:06] maybe look beyond that and offer like<br>[34:08] you know what like a K cluster modeling<br>[34:10] can offer which is something like<br>[34:12] surfacing problems you didn't know you<br>[34:14] had if that makes sense because that's<br>[34:16] another way AI can look into things is<br>[34:18] by finding patterns that a human<br>[34:20] wouldn't find them. So Andre what you<br>[34:24] want?<br>[34:24] >> So so I I think that AI is a fairly<br>[34:27] broad term. Um I think that has been<br>[34:32] around for a while and uh one of the uh<br>[34:36] more be more you know longer term aspect<br>[34:40] of it is is clustering is to be able to<br>[34:42] identify things that are are similar. Um<br>[34:46] and I think that is really relevant to<br>[34:48] reduce the volume of data or to find<br>[34:51] things that are occurring uh you know<br>[34:54] frequently um just to differentiate them<br>[34:58] from a generative AI which just<br>[35:01] inherently probably not the best tool to<br>[35:03] reduce large volumes of data. It does<br>[35:06] reduce data but not necessarily large<br>[35:07] volumes of data. So I think if you<br>[35:09] combine those AI techniques together um<br>[35:12] in one hand you could narrow down that<br>[35:14] this is the area that I want to focus<br>[35:17] this is the you know cluster of problem<br>[35:20] that I want to deal with this is the<br>[35:22] relevant metrics and logs associated<br>[35:25] with it and now how do I go about well<br>[35:28] at least explaining what this means but<br>[35:31] even I'm I'm going further typically is<br>[35:34] to say that like okay how do I actually<br>[35:35] propose a solution to that problem uh<br>[35:39] preferably in the form of a a code<br>[35:41] change.<br>[35:42] >> Yeah,<br>[35:42] >> I don't know if I want to propose an<br>[35:44] architectural change, but at least in a<br>[35:45] code change that to say like okay based<br>[35:47] on what I'm observing, I think that this<br>[35:49] is what is causing your failure and this<br>[35:51] is how you fix it. Um and I think to<br>[35:54] point is very important you at one point<br>[35:56] you do want people to have trust and to<br>[35:58] have oversight and a level of control uh<br>[36:01] over this process. I just think that I'm<br>[36:03] I'm very excited, especially over the<br>[36:05] past couple of months, how that shifts<br>[36:08] from being only be able to explain<br>[36:10] simple things to actually being able to<br>[36:12] come up with relatively uh high uh uh<br>[36:16] you know, fidelity solutions to to<br>[36:19] problems. Yet I I I don't just blindly<br>[36:23] merge things that the PR that an AI<br>[36:26] generated still<br>[36:28] >> of course but you see an improvement in<br>[36:29] accuracy of the answers and and Okay,<br>[36:31] that's that's that's great. Yeah,<br>[36:35] Tani, do you want to<br>[36:38] conclude?<br>[36:38] >> Nothing to add.<br>[36:39] >> No. Okay,<br>[36:40] >> good.<br>[36:40] >> Fine. You know, you get mic drop in.<br>[36:43] >> Yeah.<br>[36:44] >> No, thank you. That was that was very<br>[36:45] good. I I think we are now nearing the<br>[36:49] last question. So I was hoping that you<br>[36:52] know like we didn't have to worry so<br>[36:54] much about time and I said oh this<br>[36:56] question you're going to have to answer<br>[36:57] in one sentence but because we have<br>[36:58] plenty of time you can actually answer<br>[37:00] it in more than one sentence. So um this<br>[37:05] is uh for me a way to wrap up this but<br>[37:07] also to give like a t a key sorry not a<br>[37:10] t a key takeaway uh to to like the<br>[37:13] people watching us and we're going to<br>[37:14] watch uh this as being recorded but what<br>[37:17] does good observability means to you and<br>[37:21] what is your number one advice to<br>[37:23] achieve it? So I'm going to start with<br>[37:25] Tani.<br>[37:27] What is good observability and your<br>[37:29] number one advice to achieve it? number<br>[37:31] one advice. Oh my goodness. Um<br>[37:36] let's see. Okay, so um good<br>[37:40] observability<br>[37:41] makes<br>[37:43] the system legible to the people<br>[37:46] responsible for it. So allows you to<br>[37:51] see things, not always see answers, but<br>[37:53] see where things are out of balance and<br>[37:56] see where you can go dig deeper. M<br>[38:00] >> and so my number one advice is to embed<br>[38:04] it in into the rituals and the ways of<br>[38:06] working whether it's release reviews,<br>[38:08] incident reviews, weekly health check,<br>[38:10] whatever the whatever the work is that's<br>[38:13] happening for the particular audience<br>[38:15] and how they do things that that<br>[38:18] observability is available where and<br>[38:21] when they need it. So they aren't just<br>[38:23] shelfware.<br>[38:24] >> That's really good. I really like it.<br>[38:26] It's another like powerful sentence for<br>[38:28] you just said is like you know<br>[38:29] observability is not about answers it's<br>[38:30] about like you know imbalance is about<br>[38:32] like you know really helping you<br>[38:34] balancing out what you need to and yeah<br>[38:36] I guess having as part of your daily<br>[38:37] routine like your almost like your daily<br>[38:40] care to your engineering product that's<br>[38:43] yeah that's very good thank you very<br>[38:44] much I really appreciate I hope you've<br>[38:46] taken note to people because that's a<br>[38:47] it's a good line to say to your manager<br>[38:49] tomorrow at the standup you know<br>[38:53] what's the second good line you could<br>[38:54] say to that of uh engineers at standup.<br>[38:57] >> Well, maybe this is going to be<br>[38:59] overlapping a little bit, but I think<br>[39:00] that um good observability leads to a<br>[39:06] understanding of your system,<br>[39:08] understanding of your system behavior.<br>[39:10] Everything else is just data. um to the<br>[39:13] extent that the observity information<br>[39:17] allows you to learn and to understand<br>[39:20] and to reason and to improve how your<br>[39:23] system operates either as a first level<br>[39:26] second level operation people to say<br>[39:28] like okay I understand that this thing<br>[39:30] is not working because this data is<br>[39:32] flowing in because someone started a<br>[39:34] marketing campaign and there's like<br>[39:35] 2,000 new users that are pounding on our<br>[39:38] site or or or there's a Super Bowl and<br>[39:40] everybody's betting or like what<br>[39:42] whatever The thing is is is rather than<br>[39:44] looking at things independently of each<br>[39:46] other to think about this as a system<br>[39:48] and especially what I'm really<br>[39:49] passionate about is as an architect to<br>[39:51] be able to use this information almost<br>[39:54] every day or at least every sprint and<br>[39:56] say like okay nothing has broken but I<br>[39:59] see how my system behaves. These are the<br>[40:02] points of failures. these are the the<br>[40:05] places where data going through my<br>[40:07] system is being choked because I try to<br>[40:10] you know push this into a postgress<br>[40:11] database and that doesn't scale or like<br>[40:15] how do I continuously be able to use<br>[40:17] this information to improve both my<br>[40:19] day-to-day operation as well as my week-<br>[40:22] toeek monthtomon architecture.<br>[40:25] >> Yeah, that's really good. like that<br>[40:27] actually when you were talking it just<br>[40:29] made me think of like a few instances<br>[40:31] where the BBC like we didn't see things<br>[40:33] coming like um one was like I think five<br>[40:36] or six years ago like we had like<br>[40:37] Strictly Come Dancing which is like a<br>[40:39] very famous show where like um stars go<br>[40:41] dancing and basically people members of<br>[40:44] the public are asked to vote and in<br>[40:46] order to vote they need to log in the<br>[40:49] amount of password requests like you<br>[40:50] know I've forgotten my password because<br>[40:52] we got within 10 minute of the voting<br>[40:54] window open was like in millions. I kid<br>[40:57] you not. We got a million emails saying,<br>[40:59] "Can you remind me of my password so<br>[41:01] that people could actually vote." We<br>[41:02] didn't see that one coming. And then the<br>[41:04] other one was um again a user thing was<br>[41:09] um Glastonbury, which is a huge huge<br>[41:11] festival music. And at the end of<br>[41:13] Glastonbury, there's a curfew. And um<br>[41:16] and somehow at the end of the curfew, we<br>[41:18] we we put everyone into the homepage of<br>[41:21] our service. And so there was already<br>[41:23] some other people on the homepage<br>[41:24] service just like you know looking at<br>[41:26] news or doing whatever. And then<br>[41:27] suddenly we had like a huge amount of<br>[41:29] like people watching the the live stream<br>[41:31] just go onto the homepage and the<br>[41:33] homepage crashed obviously because it<br>[41:36] didn't crash. It just take five minutes<br>[41:38] to recover like people were just loading<br>[41:39] and stuff. So you are right being able<br>[41:42] to know your user behavior. I mean the<br>[41:44] external part that isn't the product<br>[41:47] itself but what integrates with it is<br>[41:49] equally as important as as what you have<br>[41:51] in it. So, thank you for that wisdom. I<br>[41:54] just very good. All right. Is there<br>[41:58] anything either of you would like to add<br>[42:00] before I call it a closure on this um on<br>[42:03] this conversation?<br>[42:06] >> This is fun.<br>[42:07] >> Yeah. Yeah, it's good. Yeah. I think we<br>[42:09] should just like, you know, stop<br>[42:10] recording and just carrying this<br>[42:11] somewhere like just the three of us.<br>[42:15] Okay. Well, thank you very much<br>[42:17] everyone. Uh thank you Tani. Thank you<br>[42:19] Andre for your participation. Uh I am<br>[42:22] now bringing this um conversation about<br>[42:25] what's your telemetry data really trying<br>[42:27] to tell you to an end. Uh it is being<br>[42:29] recorded. Feel free to watch it in your<br>[42:31] own time. And yeah, hopefully you'll be<br>[42:33] able to shine from today or to or Monday<br>[42:36] onwards uh when your when your new<br>[42:39] higherups ask about what telemetry means<br>[42:41] to you and observability. So take care<br>[42:43] everyone. Bye. You<br>[42:56] don't know. <!-- deep-read:sections end --> 📄 **Full text:** ![[Full Document Contents/Articles/What’s Your Telemetry Data Really Trying to Tell You|What’s Your Telemetry Data Really Trying to Tell You?, YouTube]] ## Highlights - experiences uh with pretty much everything related to a platform of some sort, whether it's a data platform, whether it's self-service, whether it's experiments, whether it's audience, um you name it. And I've kind of been involved in this. Um I'm really pleased to be here today. And the topic we're going to tackle is drum roll or sorry more specifically telemetry data. So when we spoke about telemetry data, I think what people what comes into people's minds are like logs, traces and ([View Highlight](https://read.readwise.io/read/01km99bkxfn48d5c5x0acqcrd5)) - Tags: 👻 ai highlighted - three activities which are part of the telemetry data can quickly turn into a hassle whether they are automated or not and combined uh they can be incredibly useful. However, there are many pitfalls. Have you ever heard of death by dashboards, alert fatigue, finding a needle in a hay stack, and my favorite as a junior developer when I looked at my colleague and asked, "How do I access the logs?" And he started by, "Let me get you on the system. Do you have the right uh do you have the rights to ([View Highlight](https://read.readwise.io/read/01km99bkxs692m2x8b0hncegwn)) - Tags: 👻 ai highlighted - customers grow and volume of data grows. Uh so it was good to start with that from day one as opposed to having it as an off. often see people struggle like oh I wanted to have better observability but it's too late because I'm already in business I don't have time to do this so I'm just glad that we were able to do this and continue to to u instrument all the components in the way they interact with each other so it's easy for me to see things that are working or not working in our s things that are not working in our customers environment how data is flowing through the system I'm ([View Highlight](https://read.readwise.io/read/01km99bkybxyypzav6w4w0e48g)) - Tags: 👻 ai highlighted - relevant leveraging that telemetry data, how do you, dear panelists, avoid alert fatigue or worse, death by dashboard? Andrew, I think you have something to say about that. >> Yeah, I think so. So, so I think that what I often see as I work uh with a number of customers over the past couple of years is that people think about like, let me just instrument everything, collect everything, and then I'll figure out what I'm going to do with this data. And then it becomes all the things that you mentioned about that by you know ([View Highlight](https://read.readwise.io/read/01km99bkz40j9nay63x492kybx)) - Tags: 👻 ai highlighted - >> So in terms of not always just trying to guess what people need to see >> and say hey here's here's what we've created now it's going to solve all your problems like and let me train you how it works and all that kind of thing. So liazing collaborating with the stakeholders understanding what are the decision- making that this data is informing again time horizons can come into play. Is this trend information? Is this something's broken ([View Highlight](https://read.readwise.io/read/01km99bkzv9s1q5tm2ay1se5dk)) - Tags: 👻 ai highlighted - to understand our systems and think about their behavior. >> Yeah. Yeah. Absolutely. No, I mean, I'm I'm all in favor. I think this is this is a great invitation to to collaborate. We're now going to move on to another part of uh the um telemetry data which are the logs. Very often the logs are considered as is for me the backbone of any engineering product because it can tell you a very useful story either for auditing or for debugging. But then ([View Highlight](https://read.readwise.io/read/01km99bm4bs3aygrbs6n6z9xbv)) - Tags: 👻 ai highlighted