>First, I don't know who or where to ask such questions of the Ops team.

You can try ops channel on irc #wikimedia-ops

>Second, is the suggestion to discard before storing as the default behavior

>with a manual switch that can be turned on by Ops to store temporary raw
>logs with IP for debugging if and when needed by Ops for a limited time --
>say an hour or two -- with automatic zeroing deletion at the end of that time
>period a viable solution to this contingency?

Given that ops issues are likely to last more than an hour or two .. ahem, I am going to say that no, probably this is not viable. If logging was to be turned on for days, well, then , maybe. Not sure, though and even in that case the solution is not that different from what it is already happening as IPs, again, are not kept long term.

On Fri, Nov 11, 2016 at 9:32 AM, James Salsman <jsalsman@gmail.com> wrote:

Nuria Ruiz wrote:
>
>.... You can bring that up with ops team, I doubt we can operate a website
> for hundreds off millions of devices (almost a billion) and troubleshoot
> networking issues, DOS and others without having access to raw IPs for a
> short period of time. Ops work doesn't need to have access to IP data long
> term, just near term.

First, I don't know who or where to ask such questions of the Ops team.

Second, is the suggestion to discard before storing as the default behavior
with a manual switch that can be turned on by Ops to store temporary raw
logs with IP for debugging if and when needed by Ops for a limited time --
say an hour or two -- with automatic zeroing deletion at the end of that time
period a viable solution to this contingency?

_______________________________________________
Analytics mailing list
Analytics@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/analytics