Why Would You Want Central Logging
-
Random question.
Why would you do something like this? Send your logs to another server?
Thanks
-
@Sparkum said in SysLog Forwarding for XenServer:
Random question.
Why would you do something like this? Send your logs to another server?
Thanks
So you can look at logging from multiple servers (or other devices) at once.
-
@BRRABill said in SysLog Forwarding for XenServer:
@Sparkum said in SysLog Forwarding for XenServer:
Random question.
Why would you do something like this? Send your logs to another server?
Thanks
So you can look at logging from multiple servers (or other devices) at once.
Also, things like having a common place to backup all logs form across your system.
And good logging program can also piece together data from various sources to paint a picture of something.
-
-
Central logging offers a lot of potential. Lots of reasons for it but just some...
- Really easy to produce central reports to look for issues across the entire estate, not just server by server.
- Easy to give log access to people who are not system admins.
- Much more secure, you can look at logs without access to the systems themselves.
- Works on systems that don't even have the ability to log into (like Windows Nano and DevOps systems.)
- Encourages good tooling, like nice graphical interfaces, reports, etc.
- Allows for correlation between systems, apps, etc. Compare a single app on many servers at once, etc.
- Protects logs in case of system failure
- Stores logs in a permanent way for ephemeral devices.
- Increases the reliability of alerting.
- Increases options for alerting.
- Allows files to be backed up under a central policy.
