Hacker News Reader

Totally agree. One huge advantage not mentioned specifically at that structured logging link is handling privacy. A logging pipeline can be set up to have a collector that automatically redacts privacy-related or sensitive fields. Only give developers access to redacted logs to help prevent leaks.

View on HN

Who would have access in the first place besides said devs?

The ops people. In many companies access to production is limited.

It's important for data to be limited to those with business need to know, which is why developers (who are responsible for the application) should have access to its data while ops (who are responsible for core infrastructure) must not.

I would not put an email address in logs, but definitely some kind of account identifier so that we can investigate bug reports from specific users.

What you want to prevent is logdumping to some third party which is a pretty easy exploit in many applications I have touched. Ops always have access to the data I think that is why we have devops, so maybe you are talking about some other kind of ops.

Reply on news.ycombinator.com