In early 2021, and after yet another incident caused by a large spike in log volume, it was clear that something had to change. Facing a near-constant 50% year-over-year volume growth and rapidly mounting operational overhead, the Slack Observability team made the decision to build a new open-source log search engine.
Building a new log search engine is a large undertaking, and there are many features that engineering teams require before replacing an existing solution. Many of these are solved problems however, with projects like Apache Lucene and Opensearch. At Slack our focus became how we could build on these existing, boring technologies to solve our unique scaling challenges better. This enabled us to support features specific to log search, and ease our team’s operational challenges by building a solution that was tailored for Slack infrastructure.
In this talk we will discuss how to identify areas where using perceived boring technology can reduce risk and accelerate development. Learn how to do more with fewer people, and how to see further, standing on the shoulders of giants. |