Kubernetes Container Orchestration Monitoring and Logging 5

Question 1

What is the primary advantage of using structured logging (JSON format) in Kubernetes applications?

Accepted Answer

Logs can be easily parsed and filtered by log aggregation tools

Answer

Structured JSON logs can be parsed, indexed, and queried by tools like Elasticsearch and Loki, enabling powerful filtering and analysis.

Question 2

Which Alertmanager concept groups related alerts together to reduce notification noise?

Accepted Answer

Grouping

Answer

Alertmanager's grouping feature batches alerts sharing common labels into a single notification, reducing alert fatigue during incidents.

Question 3

What does the Prometheus `irate()` function calculate differently from `rate()`?

Accepted Answer

Instantaneous rate using only the last two data points

Answer

`irate()` calculates the instantaneous per-second rate using only the last two data points, making it more responsive to spikes than `rate()`.

Question 4

In Loki's LogQL query language, what does a stream selector like `{app="nginx"}` do?

Accepted Answer

Filters log streams to only those with the label app=nginx

Answer

Stream selectors in LogQL use label matchers to filter which log streams (defined by their label sets) are included in the query.

Question 5

What happens to pod logs in Kubernetes when a node is deleted or fails?

Accepted Answer

Logs stored only on that node are permanently lost unless forwarded externally

Answer

Kubernetes only stores logs on the node where the container ran; if the node is lost without an external log forwarder, those logs are gone.

Kubernetes Container Orchestration Practice Test