I have done a search and, unsurprisingly, "live logging" comes up quite a bit, which makes this a little harder to find. I wanted to know what the thoughts are on live logging best practices. Now that I have everything set up and it's humming along, I don't dive into the logs often. Do folks turn off live logging for each device and app? And only turn it on for troubleshooting? I imagine writing to logs creates some overhead, but I recon it's not much.
I turn off as much logging as possible until I have to troubleshoot things. Then I turn on logging for what I need.
There are a lot of things that are very chatty in the logs for no real reason but debugging. I know its not suppose to add any strain on the box but I still just turn of as much as possible. Error's should still get thrown to the logs though.
I have disabled as much logging as I can along with descriptive text logging. I only turn it on when I am trying to troubleshoot something. But my system is over 18 months old and fairly stable. I would leave some logging enabled if you are modifying or changing things. That said, if there are errors, they will always end up being logged, if they are on the list of things that are added to user logs.