Level 2 · Dashboards, Alerting & Logs¶
Level 2 is where raw metrics become something a human actually uses: a dashboard that answers "is the system healthy?" at a glance, and an alert that pages someone only when it's genuinely worth interrupting them. This level also covers centralized logging — the third pillar, for the specific class of question metrics alone can't answer.
What was run, and what wasn't
This level runs a real local Grafana instance connected to the real Prometheus server from Level 1, with real dashboards built and real alert rules that are actually triggered on purpose. A full managed logging backend (a hosted ELK/Loki cluster) was not run as part of this course; centralized logging's real mechanics are shown against a real local log aggregation setup instead, and that distinction is kept explicit.
Prerequisites: Level 1.
Modules¶
- Grafana Fundamentals: Data Sources, Panels & Dashboards: a real Prometheus data source connected, a real panel built.
- Building a Real RED Dashboard: Rate, Errors, Duration: the single most common service dashboard pattern, built against real traffic.
- The Four Golden Signals & the USE Method: two competing frameworks for "what should a dashboard show," and when each one fits better.
- Alerting Rules: Prometheus & Alertmanager Basics: a real alert rule that really fires against real injected load.
- Alert Routing, Grouping & Silencing: real Alertmanager routing rules, tested against real simultaneous firings.
- Avoiding Alert Fatigue: Designing Alerts That Page the Right Person: a real before/after alert rule rewrite, measured by false-positive rate.
- Centralized Logging Fundamentals: Why grep Doesn't Scale: a real
timing comparison between
grepacross files and a real centralized query. - Structured Logging & Correlating Logs with Metrics: real JSON logs correlated with a real metric spike.
- Log-Based Metrics vs Native Metrics: deriving a metric from logs, measured against the real cost of doing it that way.
- Project: A Real Alert That Fires, Routes & Pages: a complete, real alerting pipeline from a real failure to a real notification.
After Level 2¶
Level 3 adds the third pillar in depth — distributed tracing with OpenTelemetry — and shows how to correlate metrics, logs, and traces for one real request, not just view them side by side.