Investigate a Server Saturated by Logging

A server is being overwhelmed and logs may be involved. Explain how you would trace the cause, stabilize the service, and prevent the problem from recurring. ### Constraints & Assumptions The report mentions log tracing and a server being saturated without specifying whether the constrained resource is CPU, memory, disk space, storage bandwidth, or a logging sink. Establish that distinction before changing logging behavior. ### Clarifying Questions Which resource is exhausted? Did log volume change recently? Are producers blocked on a sink, or is an unbounded queue growing? Which logs are required for diagnosis or audit? ### What a Strong Answer Covers Resource attribution, a safe immediate mitigation, bounded logging behavior, retention/rotation, and evidence that the underlying trigger was corrected. ### Follow-up Questions Can deleting an open log file free the expected space immediately? What happens if a remote log sink slows down? How would you reduce repetitive noise without hiding the incident?