Logging strategies in HLD - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Log Levels

Which log level is most appropriate for recording detailed information useful for diagnosing problems during development but too verbose for production?

A DEBUG

B INFO

C WARN

D ERROR

💡 Hint

Think about the level that provides the most detailed information for developers.

DEBUG level logs provide detailed diagnostic information useful during development but are usually turned off in production to reduce noise.

💻 Command Output

intermediate

Log Rotation Command Output

What is the output of running the command logrotate -d /etc/logrotate.conf on a Linux system?

HLD

logrotate -d /etc/logrotate.conf

A Starts the logrotate daemon in debug mode

B Rotates logs immediately and deletes old logs

C Shows syntax errors in the logrotate configuration file

D Simulates log rotation and shows what would be done without making changes

💡 Hint

The -d flag is for debug mode without actual changes.

The -d option runs logrotate in debug mode, showing what actions would be taken without performing them.

❓ Configuration

advanced

Configuring Centralized Logging

Which configuration snippet correctly sets up a syslog client to forward all logs to a remote server at 192.168.1.100 on UDP port 514?

A *.* 192.168.1.100:514

B *.* @@192.168.1.100:514

C *.* @192.168.1.100:514

D *.* :192.168.1.100:514

💡 Hint

Single '@' means UDP, double '@@' means TCP in syslog forwarding.

In syslog configuration, *.* @192.168.1.100:514 forwards all logs via UDP to the remote server.

❓ Troubleshoot

advanced

Troubleshooting Missing Logs

A developer notices that application logs are missing after configuring a new logging agent. Which of the following is the most likely cause?

A The logging agent is running but lacks permission to read the log files

B The application is not generating any logs

C The logging agent is configured to write logs locally instead of forwarding

D The system clock is set incorrectly

💡 Hint

Check file permissions for the logging agent.

If the logging agent cannot read log files due to permission issues, it will not forward logs even if running.

✅ Best Practice

expert

Best Practice for Log Retention Policy

What is the best practice for setting a log retention policy in a production environment to balance storage use and compliance?

A Delete logs immediately after processing to save space

B Retain logs for a defined period based on compliance requirements, then archive or delete

C Keep all logs indefinitely to ensure full audit trail

D Only keep error logs and discard info and debug logs

💡 Hint

Consider legal and operational needs when deciding retention time.

Balancing storage and compliance means keeping logs long enough to meet requirements, then archiving or deleting them.

Practice

1. What is the main purpose of using different log levels like INFO, WARN, and ERROR in logging strategies?

easy

A. To categorize logs by importance and help filter relevant information

B. To make logs look colorful and attractive

C. To increase the size of log files for better storage

D. To encrypt log messages for security

Solution

1. Step 1: Understand log levels

   Log levels like INFO, WARN, and ERROR help mark how important or severe a log message is.

2. Step 2: Purpose of categorizing logs

   This categorization helps users quickly find important messages and ignore less critical ones.

3. Final Answer:

   To categorize logs by importance and help filter relevant information -> Option A

4. Quick Check:

   Log levels = Categorize importance [OK]

Hint: Log levels help sort messages by importance fast [OK]

Common Mistakes:

• Thinking log levels are for decoration
• Assuming log levels increase file size intentionally
• Confusing log levels with encryption

2. Which of the following is the correct syntax to configure a log message format in a typical logging configuration file?

easy

A. format: asctime, levelname, message

B. format = "%(asctime)s - %(levelname)s - %(message)s"

C. format -> asctime | levelname | message

D. format = asctime + levelname + message

Solution

1. Step 1: Recognize standard log format syntax

   Typical logging uses placeholders like %(asctime)s for timestamp, %(levelname)s for log level, and %(message)s for the log text.

2. Step 2: Match correct syntax

   format = "%(asctime)s - %(levelname)s - %(message)s" uses the correct placeholder format with percent signs and parentheses, matching common logging config files.

3. Final Answer:

   format = "%(asctime)s - %(levelname)s - %(message)s" -> Option B

4. Quick Check:

   Correct placeholders = format = "%(asctime)s - %(levelname)s - %(message)s" [OK]

Hint: Look for %()s placeholders in format strings [OK]

Common Mistakes:

• Using commas or arrows instead of placeholders
• Missing percent signs and parentheses
• Concatenating strings without placeholders

3. Given this log configuration snippet:

log_level = "WARN"
log_destination = "file"

What will happen if the system logs an INFO message?

medium

A. The INFO message will be saved to the file

B. The system will crash due to invalid log level

C. The INFO message will be printed to the console only

D. The INFO message will be ignored and not saved

Solution

1. Step 1: Understand log level filtering

   Setting log_level to WARN means only WARN and ERROR messages (higher importance) are saved; INFO is lower priority.

2. Step 2: Effect on INFO messages

   INFO messages are below WARN level, so they will be ignored and not saved to the file.

3. Final Answer:

   The INFO message will be ignored and not saved -> Option D

4. Quick Check:

   Log level filter blocks lower priority logs [OK]

Hint: Logs below set level are ignored [OK]

Common Mistakes:

• Assuming all logs are saved regardless of level
• Thinking INFO logs print to console automatically
• Believing invalid log level causes crash

4. You have a logging setup that writes logs to a file, but the file remains empty even after errors occur. Which is the most likely cause?

medium

A. The log level is set too high, filtering out error messages

B. The logging format string is missing placeholders

C. The log file path is incorrect or lacks write permission

D. The system does not support file logging

Solution

1. Step 1: Check log level filtering

   Error messages are high priority, so a high log level would not filter them out; this is unlikely the cause.

2. Step 2: Verify file path and permissions

   If the file path is wrong or the system user cannot write to the file, logs won't be saved, causing an empty file.

3. Final Answer:

   The log file path is incorrect or lacks write permission -> Option C

4. Quick Check:

   File permission issues cause empty logs [OK]

Hint: Check file path and permissions first [OK]

Common Mistakes:

• Blaming log level for missing error logs
• Ignoring file system permissions
• Assuming format string affects file writing

5. You want to design a logging strategy for a web app that must:
- Capture all errors and warnings
- Save detailed info logs only during debugging
- Send critical errors to an external alert system

Which combination of strategies best meets these needs?

hard

A. Use log level WARN for normal runs, switch to INFO for debugging, and configure alerts for ERROR logs

B. Always use log level INFO and save all logs to a single file without alerts

C. Use log level ERROR only and ignore INFO and WARN logs

D. Send all logs to the alert system regardless of level

Solution

1. Step 1: Match log levels to requirements

   WARN level captures warnings and errors; INFO level includes detailed info logs for debugging.

2. Step 2: Configure alerting for critical errors

   Setting alerts on ERROR logs ensures critical issues trigger notifications externally.

3. Step 3: Evaluate options

   Use log level WARN for normal runs, switch to INFO for debugging, and configure alerts for ERROR logs matches all requirements: dynamic log level and alerting. Others miss one or more needs.

4. Final Answer:

   Use log level WARN for normal runs, switch to INFO for debugging, and configure alerts for ERROR logs -> Option A

5. Quick Check:

   Dynamic levels + alerts = Use log level WARN for normal runs, switch to INFO for debugging, and configure alerts for ERROR logs [OK]

Hint: Adjust log level by mode and alert on errors [OK]

Common Mistakes:

• Logging everything all the time wastes resources
• Ignoring alerting for critical errors
• Using too high log level and missing info logs