Cloud Fundamentals Course
Cloud Fundamentals
/
Intermediate

Centralized Logging

Definition

The aggregation and storage of all application, system, and audit logs from hundreds of different cloud servers into one single, searchable, highly durable location.

Explain Like I'm New

Instead of checking the security camera tapes in 50 different buildings, you wire all the cameras to stream to one massive TV in a central security room so you can search them all at once.

Real World Example

AWS CloudWatch Logs, Azure Log Analytics. Your app runs on 10 different servers. A user complains they got an error. Instead of logging into all 10 servers manually to read text files, you search for the user's ID in CloudWatch Logs, and it instantly finds the exact server and the exact error line.

Common Use Cases

  • •Debugging distributed systems
  • •Security auditing
  • •Compliance

Interview Questions

basic

  • Why is it a bad idea to leave your log files sitting locally on the EC2 Virtual Machine that generated them?

intermediate

  • What is 'AWS CloudTrail' and how does it differ from standard CloudWatch Logs?

Flash Cards

Question

Why not leave logs local?

Click to reveal answer
Answer

Because in the cloud, servers are ephemeral. If an Auto Scaler terminates the server to save money, or the server crashes, those local log files are deleted forever. Logs must be streamed off the server instantly.

Question

CloudTrail vs CloudWatch Logs?

Click to reveal answer
Answer

CloudWatch Logs stores the text output of your Application (e.g., 'User logged in', 'Database error'). CloudTrail is an Audit log of the AWS Account itself (e.g., 'Admin Bob deleted a database at 3:00 PM via the AWS API').