Logblog: Reviewing System Logs

« What LogLogic Really Does | Main | LogLogic and NetApp Partner »

Reviewing System Logs - Do You Have To?

Pete Boergermann of Citizens & Northern Bank - a LogLogic customer - writes on the importance of reviewing system logs in Bank Info Security. He has some smart advice for anyone looking at LMI:

Depending on the regulations you must follow for your organization and the risk profile you set for your equipment, some of your network devices may need to have their logs viewed daily. Talk to your auditors; they are not your enemy. Ask them what they will be looking for next time they visit you. If you can get a clear understanding of how they are going to audit IT Controls, you can save yourself a lot of grief and frustration. Automating this process as much as possible will save time.

Reviewing logs can help you be proactive in monitoring your network for equipment failures or could be used after a security breach to perform forensics. Translation: They can help you look like a hero. Monitoring them is a critical process in maintaining your network environment.

Posted April 02, 2006 in Log Management & Intelligence | Permalink