DATA OPS

Axiom High-Cardinality Label Blowup Detector

Scans Axiom datasets for label fields whose distinct-value count is exploding (the classic cardinality bomb), pins the runaway label.

CategoryData Ops
Enginesim
Difficultyadvanced
Triggerschedule
Steps6
Setup~25 min

How it runs

The automated pipeline, trigger to output.

  • TriggerEvery-few-hours schedule
  • ActionCount distinct values per label, two windowsAxiom
  • LogicCardinality growth past multiplier?
  • LogicBranch on severity (high vs minor)
  • ActionOpen Linear ticket for flagged labelLinearLinear
  • OutputRaise PagerDuty incident if high severityPagerDutyPagerDuty

What it does

A cardinality bomb, like a label suddenly carrying per-request IDs, can balloon ingest cost without raising total event count much, so byte-volume alarms miss it. This workflow profiles each label's distinct-value growth, identifies the field whose cardinality jumped most, and escalates based on severity.

When to use it

Use it when a recent deploy can accidentally promote a unique value (user ID, trace ID, timestamp) into an indexed label, quietly inflating storage and query cost across a shared Axiom dataset.

How it works

  1. 1A schedule runs every few hours against the target datasets.
  2. 2Query Axiom to count distinct values per candidate label over the last window versus the prior window.
  3. 3A logic gate flags any label whose distinct-value count grew past the configured multiplier.
  4. 4A severity branch splits high-impact blowups from minor ones.
  5. 5For any flagged label, open a Linear ticket naming the dataset, label, and cardinality delta.
  6. 6For high-severity cases only, also raise a PagerDuty incident so on-call can throttle the emitter before billing compounds.

Set it up

What you configure once, before turning it on.

  1. 1
    Connect AxiomLog streams, queries, dashboards.
  2. 2
    Connect LinearIssues, projects, cycles, triage.
  3. 3
    Connect PagerDutyIncidents, on-call, escalations.
  4. 4
    Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
  5. 5
    Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
  6. 6
    Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.

Run this workflow in your colony.

14-day trial. No DevOps. No Sales call. Provisioned in under a minute.