Logging and Log Management

Logging and Log Management: The Authoritative Guide to Understanding the Concepts Surrounding Logging and Log Management

Effectively analyzing large volumes of diverse logs can pose many challenges. Logging and Log Management helps to simplify this complex process using practical guidance and real-world examples. Packed with information you need to know for system, network and security logging. Log management and log analysis methods are covered in detail, including approaches to creating useful logs on systems and applications, log searching and log review.

• Comprehensive coverage of log management including analysis, visualization, reporting and more
• Includes information on different uses for logs — from system operations to regulatory compliance
• Features case Studies on syslog-ng and actual real-world situations where logs came in handy in incident response
• Provides practical guidance in the areas of report, log analysis system selection, planning a log analysis system and log data normalization and correlation

Most Helpful Customer Reviews

If there were a log management hall of fame, Clifford Stoll would likely be one of the inductees. His 1986 investigation of a seemingly insignificant accounting error in a log entry, detailed in his book The Cuckoo’s Egg, ultimately lead him to the hackers that penetrated systems at the Lawrence Berkeley National Laboratory.

In Logging and Log Management: The Authoritative Guide to Understanding the Concepts Surrounding Logging and Log Management, author and future log management hall of fame inductee Anton Chuvakin and his co-authors Kevin Schmidt and Christopher Phillips bring significant real-world experience to the reader and an important book on the topic.

Many organizations suffer the same fate as the NSA with the difficultly in effectively analyzing huge amounts of log data from disparate sources. Years ago SIM tools were supposed to easily solve that problem with log normalization and aggregation. For many firms, they are still waiting.