{"action":"created","issue":{"url":"https://api.github.com/repos/Azure/azure-linux-extensions/issues/156","repository_url":"https://api.github.com/repos/Azure/azure-linux-extensions","labels_url":"https://api.github.com/repos/Azure/azure-linux-extensions/issues/156/labels{/name}","comments_url":"https://api.github.com/repos/Azure/azure-linux-extensions/issues/156/comments","events_url":"https://api.github.com/repos/Azure/azure-linux-extensions/issues/156/events","html_url":"https://github.com/Azure/azure-linux-extensions/issues/156","id":158789740,"number":156,"title":"Default option for logs too broad","user":{"login":"nizarq","id":9325338,"avatar_url":"https://avatars.githubusercontent.com/u/9325338?v=3","gravatar_id":"","url":"https://api.github.com/users/nizarq","html_url":"https://github.com/nizarq","followers_url":"https://api.github.com/users/nizarq/followers","following_url":"https://api.github.com/users/nizarq/following{/other_user}","gists_url":"https://api.github.com/users/nizarq/gists{/gist_id}","starred_url":"https://api.github.com/users/nizarq/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nizarq/subscriptions","organizations_url":"https://api.github.com/users/nizarq/orgs","repos_url":"https://api.github.com/users/nizarq/repos","events_url":"https://api.github.com/users/nizarq/events{/privacy}","received_events_url":"https://api.github.com/users/nizarq/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-06-06T22:26:13Z","updated_at":"2016-06-07T21:30:27Z","closed_at":"2016-06-07T21:30:26Z","body":"I’ve recently been playing with the Azure containers service. I noticed that the linux machines that are provisioned as part of the cluster all have “LinuxDiagnostic” extension enabled. I also noticed that a diagnostics storage account is provisioned for each virtual machine. Sifting through what’s inside the storage account I realized, besides metrics, all sys log entries are being sent which can really pile up very quickly. \r\n\r\nFrom a customer’s perspective, given that they were not notified of the following at the time of provisioning the cluster, spending a bunch on storage might come as a surprise when they get their next bill:\r\n-\tMonitoring is being enabled on all machines. \r\n-\tStorage accounts were created for all machines. \r\n-\tVery verbose data is being send. As an example one of my machine in the cluster zero application workload, is generating tens of information or lower syslog message per second.\r\n\r\nWhile I understand the utility of enabling default diagnostics experiences for the customer. I believe we can have smarter defaults which end up not sending as much data (say only send severity levels 0-3 or Emergency, Alert, Critical and Error) by default.\r\n\r\nAs an example, on windows machines, windows azure diagnostics has better defaults where it only sends error level windows events to storage by default. "},"comment":{"url":"https://api.github.com/repos/Azure/azure-linux-extensions/issues/comments/224420592","html_url":"https://github.com/Azure/azure-linux-extensions/issues/156#issuecomment-224420592","issue_url":"https://api.github.com/repos/Azure/azure-linux-extensions/issues/156","id":224420592,"user":{"login":"ahmetalpbalkan","id":159209,"avatar_url":"https://avatars.githubusercontent.com/u/159209?v=3","gravatar_id":"","url":"https://api.github.com/users/ahmetalpbalkan","html_url":"https://github.com/ahmetalpbalkan","followers_url":"https://api.github.com/users/ahmetalpbalkan/followers","following_url":"https://api.github.com/users/ahmetalpbalkan/following{/other_user}","gists_url":"https://api.github.com/users/ahmetalpbalkan/gists{/gist_id}","starred_url":"https://api.github.com/users/ahmetalpbalkan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ahmetalpbalkan/subscriptions","organizations_url":"https://api.github.com/users/ahmetalpbalkan/orgs","repos_url":"https://api.github.com/users/ahmetalpbalkan/repos","events_url":"https://api.github.com/users/ahmetalpbalkan/events{/privacy}","received_events_url":"https://api.github.com/users/ahmetalpbalkan/received_events","type":"User","site_admin":false},"created_at":"2016-06-07T21:30:26Z","updated_at":"2016-06-07T21:30:26Z","body":"Closing as not directly related to the extensions."}}
{"actor":{"display_login":"ahmetalpbalkan"}}