System Log Reviews? 1068
-
Are you seeing regular reviews being performed by IT of system logs? Reviewing for suspicious activity? Reviewing what system administrators are doing to ensure they are not doing something harmful?
My current client states that their system logs are too voluminous to review. They save a backup copy of the logs and the only time they would refer to it if there was ever a problem.
Until there is some filtering of the system logs by additional software, it does appear that it is like searching for a needle in a haystack. I’ve seen hardcopy of some logs being over a foot.
What are you seeing? Any suggestions?