Site Reliability Engineering interview question · Most asked
What is the difference between monitoring and observability? Explain metrics, logs and traces.
Summary
Monitoring checks known failure modes with predefined metrics and alerts; observability is the ability to understand new, unknown problems by asking arbitrary questions of the system's telemetry. Metrics are cheap numeric time series for trends and alerts; logs are detailed event records; traces follow a single request across services.
Longer Answer
Metrics answer "is something wrong, and how much?"; traces answer "where in the request path is the time or error?"; logs answer "what exactly happened in this component?". Correlating them (a trace ID in every log line, exemplars linking metrics to traces) is what makes debugging fast.
High-cardinality, structured events (wide events with many attributes such as user ID, region, version) let you slice by any dimension, which is the practical heart of observability. OpenTelemetry provides a vendor-neutral standard for generating all three signals.
Key Points
- Monitoring: known questions; observability: new questions.
- Metrics, logs, traces have different strengths.
- Correlate with trace IDs.
- OpenTelemetry as the standard.
Deep dive: Observability and Operations
More most-asked Site Reliability Engineering questions
- What is Site Reliability Engineering, and how does it relate to DevOps?
- What makes a good alert? Explain symptom-based alerting and alert fatigue.
- What is an error budget, and how should it be used?
- Define SLI, SLO and SLA, and explain how they relate.
- What is burn-rate alerting, and why is it better than alerting on raw error rates?
- How do you choose good SLIs for a service?
- What are the four golden signals?
- How should incident response be organised? Describe the key roles.