The Canary That Caught It
A bad deploy raised the error rate the instant it touched real traffic. The canary saw it at one percent, rolled itself back automatically, and 99 percent of users never noticed.
Stories of observability that worked: the alert that saved the weekend, the dashboard that told the truth, and the 3am page that never came. Plus the exact practice behind every one.
Series Beyond the Dashboard: the engineering behind the stories →Postmortems, but happy
Each story is written up like an incident report with a happy ending, and closes with the practice you can borrow for your own team.
A bad deploy raised the error rate the instant it touched real traffic. The canary saw it at one percent, rolled itself back automatically, and 99 percent of users never noticed.
A pull request tried to add a user ID to a metric. A linter flagged it, a reviewer explained why, and an eight million series cardinality explosion quietly never happened.
A bug that corrupted one order in two thousand would have been invisible under head sampling. Tail-based sampling kept every failing trace, and the root cause was found in minutes.
A week on call with zero pages. Not because nothing happened, but because error budgets, symptom-based alerts, and ruthless noise pruning meant only the things worth waking for ever woke anyone.
When latency crept up, one dashboard showed the real story in seconds: a data freshness badge, SLO burn lines, and the one graph that mattered. The fix took longer to deploy than to find.
A single well-tuned alert on a slow memory climb fired on Friday afternoon, days before it would have become a Saturday-night outage. Nobody lost a weekend.
An O11y Paradise series
Real signals. Real engineering. Beyond the graphs.
The stories show what calm looks like. This series explores the engineering behind it: investigations, architecture decisions, and the tradeoffs that keep systems reliable.
Explore the series →A step-by-step investigation of a restarting container: pod status, termination reasons, events, previous logs, resource metrics, and traces.
Kubernetes and cloud-native · Incident investigation · Logs, metrics, traces, and profiling 6 min read
OpenTelemetry standardizes how telemetry is produced and shipped. Correlation, storage, and investigation are still architecture decisions you have to make on purpose.
OpenTelemetry · Observability architecture · Telemetry pipelines 6 min read
Infrastructure health and user experience are different measurements. Why a wall of green panels can sit beside a bad day for users, and how to measure from where users stand.
Reliability engineering · Logs, metrics, traces, and profiling · Incident investigation 6 min read
Borrow the calm
Plain-language answers to the questions every on-call engineer eventually asks.
Add to the light
Share the win you are quietly proud of. A human reads every submission, and you choose the byline, including none at all.
Editorial standards
Vendor-neutral by design
The practices here work with any stack. Tools are discussed on their merits, contributors disclose their affiliations, and simulated or illustrative examples are labeled as such.