Which statement explains the purpose of sampling in a structured logging strategy?

• A. To capture every event
• B. To ensure data privacy by masking sensitive information
• C. To balance observability with performance while avoiding data volume
• D. To disable logs in non-critical paths

Answer: (C)

Sampling in a structured logging strategy is about keeping enough visibility into the system while controlling the overhead. By recording a subset of events, you reduce the volume of log data, which lowers the impact on performance, storage, and processing, yet you still retain representative information to monitor behavior and diagnose issues. This balance between useful observability and practical limits is why that statement best captures the purpose of sampling. It’s not about capturing every event, nor primarily about masking privacy or turning logs off in non-critical paths.