Automate Incident Data Collection | Dataford Interview Questions

How would you automate the collection of incident response data from running Docker containers on Google Cloud without disrupting production workloads?

Implement a read-only collector that merges per-container incident-event streams without modifying them. Return events in timestamp order, break equal timestamps by container ID, remove duplicate event IDs, and stop after max_records results.

Use collect_incident_data(container_events, max_records). container_events maps container IDs to lists of event dictionaries, each containing event_id, timestamp, kind, and payload; each list is already timestamp-sorted. Return a list of event dictionaries.

Constraints

container_events is a mapping from container IDs to timestamp-sorted event lists
Each event contains event_id, timestamp, kind, and payload
Event IDs are strings and timestamps are comparable integers
max_records is a non-negative integer
Do not modify container_events or any event dictionary
The output contains at most max_records unique events

Function Signature

def collect_incident_data(container_events, max_records):

Your question is Automate Incident Data Collection. Start with the requirements in the Question tab.

Run and submit as often as you like. When you're ready, talk me through your approach or go straight to the code.

Problem

How would you automate the collection of incident response data from running Docker containers on Google Cloud without disrupting production workloads?

Constraints

container_events is a mapping from container IDs to timestamp-sorted event lists
Each event contains event_id, timestamp, kind, and payload
Event IDs are strings and timestamps are comparable integers
max_records is a non-negative integer
Do not modify container_events or any event dictionary
The output contains at most max_records unique events

Function Signature

def collect_incident_data(container_events, max_records):

Your question is Automate Incident Data Collection. Start with the requirements in the Question tab.

Run and submit as often as you like. When you're ready, talk me through your approach or go straight to the code.