Question

A retail company runs several microservices on Cloud Run. During a recent outage, the SRE team spent hours manually correlating request logs by trace ID because they had to export logs to BigQuery first and wait for the scheduled sink to run. The team wants the ability to run ad hoc SQL-style queries directly against their existing Cloud Logging log buckets during incidents, without setting up an export pipeline or duplicating storage. Which approach best meets this requirement?

Accepted Answer

Upgrade the relevant log buckets to use Log Analytics, then query them using the SQL interface in the Log Analytics page or a linked BigQuery dataset.

Answer

Create a new aggregated log sink that continuously streams all logs to a dedicated BigQuery dataset for real-time querying.

Answer

Enable Cloud Trace sampling at 100% so all request logs are automatically indexed and searchable during incidents.

Answer

Increase the log bucket retention period to 400 days so historical logs remain queryable through the Logs Explorer search bar.