Re: Which reports are most important?
James Turnbull <[email protected]>
| Newsgroups | gmane.comp.sysutils.loganalysis |
|---|---|
| Message-ID | <[email protected]> |
Quoting Chris Brenton <[email protected]>: > What do you feel are the top 5 reports a centralized log management > system should provide? This is not so much my Top 5 but some additions to your list below. Users/groups created/deleted/changed Anti-virus / spam detection (alerts for AV and stats for spam) FW/VPN/gateway ruleset & configuration changes Tripwire-style reports for critical files/hosts Failed jobs/cron/batches Regards James Turnbull -- James Turnbull <[email protected]> --- Author of Pro Nagios 2.0 (http://www.amazon.com/gp/product/1590596099/) Hardening Linux (http://www.amazon.com/gp/product/1590594444/) --- PGP Key (http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x0C42DF40)