SRE vs traditional ops on a recurring alert?
whether you grasp the software-engineering mindset of SRE.
traditional ops repeatedly handles the alert manually and scales by adding people; SRE treats it as a bug, automates or eliminates the root cause, and scales sublinearly.
WHAT THIS TESTS This advanced question checks whether you internalize that SRE is operations approached with a software-engineering mindset, where the goal is to make human effort scale sublinearly with service growth, not just to respond faster.
A GOOD ANSWER COVERS Describe the traditional operations approach first: when the recurring alert fires, an operator triages it manually, perhaps following a runbook, resolves it, and moves on. As volume grows the team handles it more often and, when overwhelmed, hires more operators. The cost scales linearly with load, and the underlying cause persists indefinitely because firefighting leaves no time to fix it. Now the SRE approach: the recurring alert is treated as a bug to be engineered away. Options include automating the remediation so no human is paged, fixing the root cause in the service so the condition stops occurring, or, if the alert is non-actionable, tuning or deleting it to cut alert fatigue. SRE deliberately budgets engineering time for this and measures toil to justify it. The long-term outcome diverges sharply: ops accumulates headcount and toil, while SRE drives the recurring work toward zero and frees engineers for higher-value reliability work.
COMMON WRONG ANSWERS Saying SRE just buys better monitoring tools. Treating the difference as merely faster manual response. Ignoring the headcount-scaling contrast. Assuming every alert should be automated rather than sometimes eliminated.
LIKELY FOLLOW-UPS When should you delete an alert instead of automating it? How do you fund the engineering time amid ongoing pages? What if the root-cause fix is owned by another team? How do you avoid automating a flaky signal?
ONE CONCRETE EXAMPLE A disk-usage alert on a log host fires nightly. Ops logs in and clears old logs each time, forever. SRE instead ships log rotation and retention plus alerting only on genuine anomalies, then questions whether the alert is even actionable. Six months later ops would still be clearing disks nightly, whereas the SRE solution has eliminated the page entirely, illustrating linear toil versus a one-time engineering investment.
Read the original → sre.google
Get five bites like this every day.
Tezvyn delivers a daily feed of 60-second tech bites with quizzes to lock in what you learn.