Best Practices
Advertisement

Log Collection

Syslog-ng - http://www.balabit.com/products/syslog_ng/

If you're growing your own log management tools, or not satified with the aggregation methods offered by the ones you bought, this kit warrants serious consideration. Internal support for handling almost any type of log source (udp syslog, file tailing, named pipe, dgram/stream), coupled with TCP transport for long haul aggregation, goes a long way towards getting logs from any of your devices back to your analyzers with excellent loss mitigation.

Advertisement