~/talk

7 Petabytes of Logs in Elastic. How We Did It

TalkinRussianat Saint HighLoad++ 2023 · 2023-06-26..06-27· [databases, observability]
links:none on file
slides:none on file

Tinkoff describes scaling their in-house monitoring platform Sage, which uses Elasticsearch to collect logs and metrics from thousands of services. The talk covers handling growth to 7 petabytes of logs across 15 clusters (370 nodes) and the operational challenges and solutions they applied to manage that scale.

AI-written summary · about

  1. 0:00Introduction
  2. 2:16Building our own system
  3. 7:23How Elasticsearch works
  4. 10:13Large storage principles
  5. 11:58Data upload with Kafka
  6. 13:24Searching across data centers
  7. 15:15Small clusters benefits
  8. 16:59Node roles and setup
  9. 18:24Quotas and limits
  10. 22:59Logstash replacement
  11. 26:52Index lifecycle
  12. 31:06Custom index features
  13. 34:18Java optimizations
  14. 39:16Advice and future plans
  15. 45:19Stricter data schemes
  16. 47:26Blocking bad queries
  17. 48:51Handling log backlog
  18. 50:35Custom log database
  19. 53:02Monitoring and security
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.