Apache Kafka operations and monitoring

Day-two work on a running Kafka cluster: metrics and alerting, consumer lag, partition moves, broker removal, admin tools, troubleshooting and KRaft metadata recovery.

Key Apache Kafka metrics to monitor and alert on

The short list of Kafka metrics that catch real problems: under-replicated and offline partitions, active controller count, ISR shrinks, request latency, KRaft quorum metrics and consumer lag, with alert thresholds to start from.

Monitoring Kafka consumer lag

Measuring how far consumers are behind: records-lag-max from clients, kafka-consumer-groups describe, exporters for Prometheus, lag per partition versus total lag, and alerting on lag that grows instead of lag that exists.

Open-source web UIs for Kafka administration

Giving teams a UI for Kafka without a commercial console: kafbat UI features, authentication and RBAC, read-only modes for production, and what to keep in the CLI and automation instead.

Resetting Kafka consumer group offsets safely

Replaying or skipping data by resetting offsets: the reset scenarios, dry runs versus --execute, stopping the group first, per-topic and per-partition scope and recording what was changed.

Troubleshooting Kafka consumer group rebalances

Stopping rebalance storms: max.poll.interval.ms and slow processing, static membership, the classic versus consumer group protocol from KIP-848, and the metrics and logs that show why a group keeps rebalancing.

Debugging KRaft metadata in Kafka

Investigating controller and metadata problems: kafka-metadata-quorum status and replication output, decoding metadata logs and snapshots with kafka-dump-log, the metadata shell and dynamic log levels on controllers.

Replacing a failed KRaft controller disk

Recovering a controller whose metadata directory was lost: waiting for a caught-up majority, checking lag and fetch timestamps, reformatting with the cluster ID and the narrow case for --ignore-formatted.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.