Monitoring and Logging Flashcards

What is the purpose of a Prometheus AlertManager?

Answer: Route and deduplicate alerts from Prometheus

AlertManager handles alerts sent by Prometheus, deduplicating, grouping, and routing them to receivers like email, Slack, or PagerDuty.

Which Fluent Bit component is responsible for parsing and transforming log records before they are sent to an output?

Answer: Filter plugin

Filter plugins in Fluent Bit process and transform log records between input collection and output delivery, enabling parsing, enrichment, and modification.

What Kubernetes resource type is most commonly used to deploy a log collector (like Fluent Bit) on every node in a cluster?

Answer: DaemonSet

A DaemonSet ensures that one pod runs on every (or selected) node, making it ideal for node-level log collection agents.

In OpenTelemetry, what is a 'span'?

Answer: A single unit of work or operation within a distributed trace

A span represents a single named, timed operation within a trace, capturing start time, duration, and contextual attributes of that unit of work.

Which Prometheus metric type is best suited for measuring request latency distribution with configurable quantiles calculated server-side?

Answer: Summary

Summary metrics calculate configurable quantiles (e.g., p50, p95, p99) on the client side and are useful for pre-aggregated latency distributions.

What is the role of a 'scrape interval' in Prometheus?

Answer: How often Prometheus queries targets for metrics

The scrape interval defines how frequently Prometheus pulls (scrapes) metrics from each configured target endpoint.

Which component in the Elastic Stack (ELK) is responsible for receiving, transforming, and routing log data?

Answer: Logstash

Logstash ingests data from multiple sources, transforms it using filter plugins, and routes the output to destinations like Elasticsearch.