DOP-C02 Question 25
Single answerYour organization runs a microservices-based application in Amazon EKS. Each microservice writes its logs to Amazon CloudWatch Logs. Due to a recent SLA breach, the development team wants to analyze application performance using these logs. They need a solution that can quickly ingest the logs, allow querying, and provide visualizations for trends and patterns over time. What is the most effective way to achieve this requirement?
- A
Set up Amazon OpenSearch Service, stream logs from CloudWatch Logs to OpenSearch using an Amazon Kinesis Data Firehose delivery stream, and use OpenSearch Dashboards for analysis and visualization.
- B
Enable CloudWatch Logs Insights to query the logs directly and visualize results using CloudWatch dashboards.
- C
Stream logs from CloudWatch Logs to Amazon S3, set up an AWS Glue crawler to catalog the data, and use Amazon Athena to query and visualize the logs.
- D
Deploy a third-party log aggregation tool on Amazon EC2 to ingest and analyze the logs from CloudWatch Logs.
Show answer and explanation
Correct answer: A
Explanation
The most effective solution for ingesting, querying, and visualizing logs from CloudWatch Logs is to use Amazon OpenSearch Service combined with Amazon Kinesis Data Firehose. This approach leverages native AWS capabilities that are purpose-built for log analytics and visualization. OpenSearch Dashboards provide user-friendly visualization tools, making it easier to identify trends and patterns in the logs.
- A. Correct.
Correct. Amazon OpenSearch Service is designed for log analytics and can integrate well with CloudWatch Logs using Kinesis Data Firehose. OpenSearch Dashboards provide effective visualization capabilities.
- B. Incorrect.
Incorrect. While CloudWatch Logs Insights allows querying of logs, it is not ideal for large-scale log analytics with complex queries and does not offer advanced visualization features like OpenSearch Dashboards.
- C. Incorrect.
Incorrect. This solution involves multiple services and significant overhead, making it less efficient and complex compared to using Amazon OpenSearch Service for log ingestion and visualization.
- D. Incorrect.
Incorrect. Deploying a third-party tool on Amazon EC2 adds unnecessary maintenance overhead and complexity when AWS native services like OpenSearch Service can fulfill the requirements.