Which statement best summarises log collection practice when troubleshooting Instana?
Select an answer to reveal the explanation.
Short Explanation
Scope it, keep it, read it before you change anything. You want the agent and backend logs for the affected components and time period, and you want them before restarts or other state changes. Order matters more than volume here.
Full Explanation
The correct statement is to preserve and collect the agent and backend logs covering the affected components and time period, and use them before taking actions such as restarts that change system state. Scoping keeps the volume readable, preservation keeps the evidence intact, and gathering before state-changing actions ensures the record of the original failure survives. Collecting all logs from every host in the estate is incorrect because estate-wide collection produces an unmanageable volume dominated by irrelevant entries. Clearing the logs and reproducing the fault so only the relevant entries remain is incorrect because clearing first assumes the fault can be reproduced on demand, which is frequently false. Restarting the affected components first and collecting logs only if the problem returns is incorrect because restarting first is what destroys the state that would have explained the problem. For the exam, be able to state scope, preservation and ordering together.