Company
Date Published
Author
Abhinav Garg
Word count
949
Language
English
Hacker News points
None

Summary

CockroachDB has introduced a feature that allows users to export their database logs to cloud-native services like AWS Cloudwatch or GCP Cloud Logging, providing enhanced self-service observability without needing technical support. This capability addresses the challenges of identifying transaction bottlenecks and auditing user actions by enabling direct access to logs, which is crucial for maintaining service level agreements and information security. The log export process involves configuring a cloud-native log service, setting up necessary IAM roles, and streaming logs in real-time, including SQL audit logs marked as redactable to protect sensitive data. Customers can also redirect these logs to third-party observability platforms if preferred. The integration with AWS and GCP requires specific configurations, such as cross-account IAM roles and trust relationships, ensuring secure log access and management. This feature is particularly beneficial for application teams needing to evaluate service providers based on manageability and security, as it provides seamless user onboarding, self-service capabilities, and robust data protection measures.