Opened 2 months ago

Last modified 7 weeks ago

#29393 new task

Set up a loghost

Reported by: ln5 Owned by: tpa
Priority: Medium Milestone:
Component: Internal Services/Tor Sysadmin Team Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Just do it.

Child Tickets

Change History (1)

comment:1 Changed 7 weeks ago by anarcat

how do we do that? what's a loghost? just a syslog central server that receives everything? what about anonymisation? that's done on the remote hosts? what about non-syslog logs like apache?

if we go the prometheus route for monitoring, we are also probably going to use grafana for graphing/trending, and they have an interesting project called loki to aggregate and parse logs that we might want to look into.

another common alternative to syslog is logstash which, combined with ElasticSearch and Kibana makes for the acronym "ELK" that's commonly deployed as a stack, with Granafa sometimes replacing Kibana...

Note: See TracTickets for help on using tickets.