December 2017
Intermediate to advanced
410 pages
11h 5m
English
Don't log everything without understanding, is the rule. We had a time where all the application developers used log level as INFO for the application and it used to behave like an evil random large-scale log generator. All these logs used to reach our central ELK Stack and it led to 200-300 GB of logs per day at a minimum.
When developers were asked to explain, even they did not have much idea on what the logs really meant because it was at the INFO level, so even the things that are not required were monitored.
Thus, for every log you send to the log monitoring tool, questions need to be asked about what value the log can provide in an overall SOC architecture.
Read now
Unlock full access