Soru

Zorluk: OrtaMonitoring and Log Routing Solutions

A media company is designing a monitoring and log routing architecture for a new application. The application developers require Kusto Query Language (KQL) access to application performance telemetry for real-time debugging. The compliance team requires that raw HTTP access logs be retained for seven years for auditing purposes, though they will rarely be read. The security architecture must minimize ingestion and retention costs. Which diagnostic log routing and storage strategy should you recommend?

  1. Route the performance telemetry to a Log Analytics workspace, and route the HTTP access logs to an Azure Storage account configured with a lifecycle management policy.Cevap
  2. B
    Route both the performance telemetry and the HTTP access logs to a single Log Analytics workspace with a seven-year retention period.
  3. C
    Route the performance telemetry to an Azure Storage account configured with a lifecycle policy that moves data to the Archive tier, and route the HTTP access logs to a Log Analytics workspace.
  4. D
    Configure an Azure Policy using the Deny effect to block the creation of any application resources unless they route all generated logs to both a Log Analytics workspace and a Storage account.

Cevap

Route the performance telemetry to a Log Analytics workspace, and route the HTTP access logs to an Azure Storage account configured with a lifecycle management policy.
The correct strategy separates logs based on their use case and cost. Telemetry required for developer debugging is routed to a Log Analytics workspace for KQL support. Raw HTTP logs, which are rarely accessed but must be retained for seven years, are routed to an Azure Storage account where a lifecycle policy moves them to cheaper storage tiers (like Archive) to minimize retention costs.

Adım Adım Çözüm

1
Analyze the requirements for application performance telemetry.
Developers need real-time debugging using Kusto Query Language (KQL), which requires a Log Analytics workspace.
Log Analytics is the primary monitoring service in Azure that supports KQL queries.
2
Analyze the requirements for raw HTTP access logs.
Logs must be kept for seven years, are rarely read, and must minimize ingestion/retention costs.
Azure Storage accounts with lifecycle management policies are the most cost-effective solution for long-term cold storage.
3
Combine the routing requirements into a single design.
Route telemetry to Log Analytics and HTTP access logs to Azure Storage.
This separation achieves the developer capability goals while optimizing costs.

Anahtar Kavram

Log routing optimization based on query requirements and retention costs.
Bu soruyu puanla