Operations guide

Confirm First

Observability and audit guide.

Cross-product routing for health, metrics, audit, logs, diagnostics, support bundle support details, and privacy-safe handoff. Product runbooks remain the source of truth for exact commands, expected output, remediation, and limits.

Guide Snapshot

Products
3
Signal families
6
Runbook links
3
Documentation status
Routed

Signal Map

Cross-product observability and audit starting points
ProductHealthMetricsAuditLogs and diagnosticsRunbook
ObjectDBGET /health plus /v1/platform/capabilities for startup probe evidence.No dedicated metrics surface is documented in the current runbook; use response headers, capability JSON, and S3 Core smoke evidence.No live audit route is documented; preserve S3 operation headers, error XML, request ID, and route shape.Service terminal output, platform capability JSON, S3 response headers, XML errors, and data-directory checks.ObjectDB operator runbooks
Message BrokerPublic GET /health reports readiness, storage, release metadata, and auth mode.GET /metrics is available only when HTTP metrics exposure is enabled./v1/audit/events and /v1/audit/export are administrator-only and tenant-filtered in protected modes.mq diagnostics collect, remote diagnostics reads, storage inspection routes, metrics output, audit export, and replication status.Message Broker operator runbooks
LogDBGET /health confirms the local process and bind address.Metrics and profiles are outside the documented LogDB route surface; use OTLP admission, query metadata, segment, WAL, and BYOC preflight evidence instead.Replay and audit foundations are pproduct-bound; do not present them as public audit APIs.OTLP admission response, query response shape, WAL/data-directory context, segment bundle metadata, S3 query-read config, and BYOC preflight.LogDB operator runbooks

First Response Flow

  1. 1
    Identify ScopeName the product, environment, route or script, readiness label, and customer-visible symptom.
  2. 2
    Capture FirstSave read-only evidence before restart, cleanup, queue mutation, data-directory deletion, WAL repair, fixture change, or config mutation.
  3. 3
    Classify SignalMark the signal as health, metrics, audit, log, diagnostic, config, data-shape, or product source scope.
  4. 4
    Link RunbookUse the product runbook that owns exact commands, expected output, and the nearby limits.
  5. 5
    Redact PackageMinimize payloads, credentials, customer identifiers, private topology, and secrets before sharing.
  6. 6
    Escalate With support detailsSend the runbook link, captured evidence, limits, and required sensitive support teams together.

Health Guidance

Read-only health source scope and limits
ProductFirst checkCaptureDo not infer
ObjectDBGET /health and /v1/platform/capabilities.Status, headers, endpoint value, capability fields, data-directory posture, and service terminal state.Do not infer durability, recovery, availability, performance, support, security, scale, or customer deployment readiness.
Message BrokerGET /health on the selected node.Status, node id, storage status, auth mode, release metadata, endpoint, and timestamp.Do not infer cross-site replication outcome, failover, queue recovery, support coverage, or customer topology readiness.
LogDBGET /health and the configured LOGDB_BIND_ADDRESS.Status, bind address, service terminal state, data directory, WAL mode, and query-read store.Do not infer S3 publication, BYOC deployment readiness, support posture, external sink behavior, metrics, profiles, or GA scope.

Metrics Guidance

Metrics availability and substitute signals
ProductCurrent postureUse instead when absentReview boundary
ObjectDBNo dedicated metrics endpoint is documented in documented source scope.Health, platform capabilities, S3 operation headers, request status, and data-directory evidence.Do not invent dashboard, scrape, performance, capacity, or alert wording from local smoke output.
Message BrokerGET /metrics when HTTP metrics exposure is enabled.Metrics route status, startup flag, response body header, and exporter configuration.Tenant and stream labels need security and operations acceptance before stronger wording.
LogDBMetrics and profiles are unsupported in the current compatibility matrix.OTLP admission status, query metadata, segment counts, WAL evidence, and S3 query-read config.Do not claim metrics or profiles ingest from logs/traces route limits and compatibility guidance.

Audit Guidance

Audit-like support details and redaction boundaries
ProductCurrent audit signalCaptureRedact or avoid
ObjectDBS3-shaped route limits and compatibility guidance and response headers.Request method, path shape, status, operation header, request ID, and known-limits link.Redact access keys, bearer tokens, payload bodies, sensitive object keys, tenant identifiers, and customer data.
Message Broker/v1/audit/events or /v1/audit/export where auth permits.Route, query params, auth mode, status, event count, content type, and payload-free line sample.Redact API keys, bearer tokens, trusted headers, payloads, personal data, tenant IDs, customer stream names, and private topology.
LogDBTenant admission and query evidence; replay and audit foundations stay pproduct-bound.Tenant admission result, query shape, matched count, scanned bundle count, used indexes, and pproduct-bound audit notes.Redact raw telemetry, customer dataset names, sensitive record IDs, identifying trace/span IDs, account IDs, bucket names, KMS ARNs, and IAM role ARNs.

Privacy-Safe Support Practices

Default support handoff practices
PracticeRequired actionReview owner
Capture Before MutationSave health, metrics, audit, logs, diagnostics, config, and route output before restarting, deleting, retrying with different flags, or cleaning local state.Operations team
Minimize PayloadsPrefer status, headers, counts, IDs, schemas, route names, and shape-only samples over raw object bodies, stream payloads, telemetry payloads, cache values, or protocol frames.Privacy team
Redact CredentialsRemove API keys, bearer tokens, mTLS material, access keys, private keys, trusted identity headers, AWS credentials, and shell history with secrets.Security team
Redact Customer IdentifiersRemove tenant identifiers, dataset names, stream names, bucket names, object keys, record IDs, trace/span IDs, private hostnames, account IDs, ARNs, and proprietary topology when sensitive.Support team
Keep Limits With status notesInclude the readiness label, runbook link, compatibility or limits page, and what the evidence does not prove.Documentation checks
Route Sensitive ReviewUse documented source scope for support, telemetry, logs, traces, customer data, retention, redaction, operational safety, and handoff wording.Documentation owner

Support Bundle Shape

What to include, exclude, or redact
Bundle sectionIncludeExclude or redact
Case summaryProduct, environment, route or script, readiness label, symptom, impact scope, timestamp, and first failing status or reason code.Customer names, account details, private topology, and unsupported promises.
HealthHealth route response, bind address, selected node or service, release metadata where available, and readiness blockers.Tokens, unrelated headers, customer hostnames, and full environment dumps.
MetricsScrape status, metric-family availability, disabled response, startup metrics flag, and selected product runbook.Tenant labels, stream names, customer dimensions, and unreviewed dashboard screenshots.
AuditRoute, query parameters, auth mode, event count, content type, redacted sample, and tenant-filter note.Credentials, payloads, personal data, tenant IDs, stream names, and private topology.
Logs and diagnosticsService terminal tail, diagnostics bundle summary, storage or WAL state, segment counts, protocol fixture name, and command exit code.Raw payloads, secrets, private keys, unrelated directory listings, full customer traces, and destructive cleanup commands.
ConfigProduct-specific bind address, data directory, storage mode, query-read store, auth mode, and validation flags needed to reproduce the symptom.Shared-state paths when unnecessary, shell history, cloud credentials, account IDs, ARNs, bucket names, and customer-specific namespaces.
status-note linksProduct runbook, reference page, compatibility row, limits page, status-note row, and owning team.Roadmap promises, stronger maturity wording, and claims outside the linked evidence.

Product Escalation Links

Guide Boundaries

Support Details Are Not A Commitment

Health, metrics, audit, logs, diagnostics, and support bundles show bounded signals. They do not create support, availability, privacy, or retention promises.

Payloads Are Last Resort

Prefer shape, status, count, route, header, reason-code, and product source scope before including raw customer payloads or traces.

Runbooks Own Commands

This guide routes responders to the right product page; exact commands and expected outputs stay in product-specific runbooks.

Source scope

Source scope map
Guide areaSource scopeStatus
Runbook template and support handoff standarddocumented source scope and /operations/Source-scoped
ObjectDB health, platform, S3 Core, data-directory, and support detailsdocumented source scope and /products/objectdb/operations/operator-runbooks/Source-scoped
Message Broker health, metrics, audit, diagnostics, storage, quota, replication, and support detailsdocumented source scope and /products/message-broker/operations/operator-runbooks/Source-scoped
LogDB health, OTLP, WAL, segment, S3 query-read, BYOC, and support detailsdocumented source scope and /products/logdb/operations/operator-runbooks/Source-scoped
Sensitive review and privacy-safe handoff routingdocumented source scopeSource-scoped

Limits

  • This guide is an operations status-note router; it does not replace product-specific runbooks, references, compatibility matrices, known-limits pages, or product support boundaries.
  • Do not use this guide to claim centralized monitoring, dashboarding, alerting, incident response coverage, support response expectations, retention policy, audit completeness, data handling approval, security controls, compliance status, availability, performance, scale, or customer commitments.
  • Do not share support details until the package is minimized, redacted, scoped to the issue, and linked to the relevant runbook and limits.
  • Support bundle and privacy wording stays product-bound by the support privacy review.

Safe Next Steps

  • Available

    Open operations index

    Apply the standard evidence-capture, escalation, review, and limits shape when drafting new runbooks.

  • Available

    Use ObjectDB operator runbooks

    Follow health, platform capabilities, S3 Core smoke, data-directory, unsupported behavior, and support details checks.

  • Available

    Use Message Broker operator runbooks

    Follow health, metrics, audit, diagnostics, storage inspection, quota, replication status, and support details checks.

  • Available

    Use LogDB operator runbooks

    Follow OTLP admission, WAL, segment, query, S3 query-read, BYOC preflight, and support details checks.

  • Available

    Use troubleshooting index

    Find symptom-oriented first checks across ObjectDB, Message Broker, LogDB, and support handoff.

  • Available

    Use support bundle and privacy page

    Apply support bundle contents, exclusions, redaction expectations, approval triggers, and privacy review boundaries.