Three connected blocks labeled Observe, Decide, and Act.

Give a log query a question and a denominator

A useful logging design starts with a question precise enough to become a query. “Show errors” is different from “How many checkout requests finally failed between ten and eleven UTC?” The first locates diagnostic events. The second needs a population of completed requests, a definition of failure, and a time rule. Collecting more text does not supply these missing semantics automatically. ...

September 6, 2026 · 5 min · XB Field Notes
Renaming a log changes its pathname while an existing writer can continue growing the old object.

Log rotation needs writer handoff and a retention budget

Log rotation divides a continuing stream into files that can be retained, searched, compressed, and eventually removed. A useful policy defines both when to rotate and which history to keep. It must also account for how the application holds its output file open. Renaming a pathname and successfully redirecting future log records are separate steps in that operational contract. ...

July 10, 2026 · 5 min · XB Field Notes