Tools / Datadog Interview questions
How does log rehydration work from Datadog archives?
Logs sent to a cloud storage archive (rather than fully indexed) aren't searchable in the Log Explorer by default - rehydration is the process of pulling a specific subset back out of that archive, based on a time range and optional filter, into a temporary, searchable index.
This lets teams keep the bulk of their log volume in cheap, unsearched archival storage most of the time, and only pay the cost of making a slice of it searchable on the rare occasions - an investigation, an audit request - when it's actually needed.
Because rehydration re-indexes real data on demand, it takes some time to complete and incurs its own indexing cost for that rehydrated slice, so it's a deliberate, scoped action rather than something done casually for every archived log.
More Related questions...