mellowd

  • Re: Using AWK and SED for viewing logs

    Great point. I do export as read-only for this exact reason. Very simple to sed an entire file to hide someones tracks otherwise
  • Re: Log time lengths

    I tend to agree. Most logs have a very short 'shelf life' - Anything more than a couple of weeks is generally overkill if you need to tie it up to earlier events. On the other hand, there i…
  • Using AWK and SED for viewing logs

    When saving logs I like to have as verbose data as possible to be stored. However when viewing a log I may only be looking at specific parts of that log. Another concern is if I need to give my logs …
  • Log aggregation

    Way back in the past I used to view logs after an event has happened. This was painfully slow, especially when viewing the logs of many systems at the same time. Recently I've been a big fan of …
  • Log time lengths

    How long do you keep your logs for? The answer can vary wildly depending on the industry you work for. As an example, most VPN providers specifically note that they do not hold logs, so even if a gov…