Put a ± on a measured ratio
The standard error of an indicator from its window size, the n needed to resolve a tenth of a per cent, and the reason a short window’s 99.95% is not evidence of meeting a 99.9% objective.
Every earlier course produced a number; this one asks how you would know it from a live system, and shows the four ways the measurement lies: percentiles that were averaged, histograms with wide buckets, load generators that skipped the slow requests, and scrape intervals that never saw the spike. It ends with the arithmetic of sampling, cardinality, load-test length and alerts.
Overview
By the end you can put an error bar on an indicator of service quality, aggregate percentiles without inventing one, correct two measurement biases, and size a sample, a load test and an alert so that each sees what it claims to see.
The standard error of an indicator from its window size, the n needed to resolve a tenth of a per cent, and the reason a short window’s 99.95% is not evidence of meeting a 99.9% objective.
The fleet p99 from merged samples against the mean of per-host p99s on the same data, and the interval a histogram’s p99 is actually known to.
Coordinated omission, corrected by imputing the requests a stalled generator never sent; and the spike a scrape interval cannot see, with the longest invisible one named.
The sampling rate that captures a rare event, the number of requests a load test needs to see its p99.9, the label cardinality a metric costs, and the false-alarm rate a threshold produces on a noisy ratio.
Lessons
The error bar on a ratio first, because every later lesson is about a ratio; then the three ways an aggregate lies; then the arithmetic of what a sample can and cannot see; and last the two alert calculations.
Latency and the tail, and availability and failure, plus the binomial distribution, the geometric distribution and waiting times, the sum and product rules, variance and standard deviation and expected value from discrete mathematics.
Compute the standard error before arguing about any measured ratio. Most disagreements about whether an objective was met are disagreements about a number whose error bar contains both positions.
Do the aggregation lesson on data where the answer is surprising. The mean of per-host p99s can land below the fleet median, and the lab has a preset where it does.
Treat every alert threshold as a statement about the sample, not about the system. The last page computes what a threshold fires at when nothing at all has changed.
Tracing systems, dashboard design and the operational tooling around metrics.
Statistical inference beyond these direct calculations — no hypothesis tests, no confidence intervals by a normal approximation, no regression.
Anomaly detection as a technique. “Threshold Alerts and False Alarms” computes a false-alarm rate; it does not propose a detector.