Monitoring vs. Observability: Known-Unknowns vs. Unknown-Unknowns¶

Monitoring checks predefined conditions (known failure modes); observability enables investigation of novel problems (questions you couldn't anticipate). The distinction is between verification and exploration.

Tension Addressed¶

Reactivity vs. Proactivity - monitoring is reactive, observability enables proactive investigation

Recognizable As¶

Pre-defined dashboards/alerts vs. ad-hoc query capability; "is this metric healthy" vs. "why is this request slow"; fixed checks vs. exploratory analysis

Canonical Sources¶

Majors, "Observability Engineering" (2022); Sridharan, "Distributed Systems Observability" (2018)

Transfers To¶

Scientific method (hypothesis testing vs. exploration), Debugging (known bug patterns vs. novel failures), Security (signature detection vs. anomaly detection)

An observable system lets you ask new questions without deploying new code. This requires rich, queryable data with sufficient dimensionality to slice by arbitrary attributes.