Logging and Log Management

Logging and Log Management: The Authoritative Guide to Understanding the Concepts Surrounding Logging and Log Management introduces information technology professionals to the basic concepts of logging and log management. It provides tools and techniques to analyze log data and detect malicious activity. The book consists of 22 chapters that cover the basics of log data; log data sources; log storage technologies; a case study on how syslog-ng is deployed in a real environment for log collection; covert logging; planning and preparing for the analysis log data; simple analysis techniques; and tools and techniques for reviewing logs for potential problems. The book also discusses statistical analysis; log data mining; visualizing log data; logging laws and logging mistakes; open source and commercial toolsets for log data collection and analysis; log management procedures; and attacks against logging systems. In addition, the book addresses logging for programmers; logging and compliance with regulations and policies; planning for log analysis system deployment; cloud logging; and the future of log standards, logging, and log analysis. This book was written for anyone interested in learning more about logging and log management. These include systems administrators, junior security engineers, application developers, and managers.

Autorentext

Kevin J. Schmidt is a senior manager at Dell SecureWorks, Inc., an industry leading MSSP, which is part of Dell. He is responsible for the design and development of a major part of the company's SIEM platform. This includes data acquisition, correlation and analysis of log data.Prior to SecureWorks, Kevin worked for Reflex Security where he worked on an IPS engine and anti-virus software. And prior to this he was a lead developer and architect at GuardedNet, Inc.,which built one of the industry's first SIEM platforms. Kevin is also a commissioned officer in the United States Navy Reserve (USNR). Kevin has over 19 years of experience in software development and design, 11 of which have been in the network security space. He holds a B.Sc. in computer science.

Klappentext

Effectively analyzing large volumes of diverse logs can pose many challenges, such as huge log-volumes, "Logging and Log Management" helps to simplify this necessary but complex process. Everything you need to know about system, network and security logging as well as about dealing with logs including log management and log analysis. From approaches to creating useful logs on systems and applications to log analysis, log searching and log review.
Comprehensive coverage of log management including analysis, visualization, reporting and more Discover different uses for logs -- from system operations to regulatory compliance Includes Case Studies including one on building your own Log Analysis System

Zusammenfassung
Effectively analyzing large volumes of diverse logs can pose many challenges. This title helps to simplify this complex process using practical guidance and real-world examples. It includes information on different uses for logs - from system operations to regulatory compliance.

Inhalt

Chapter 1 Logs, Trees, Forest: the Big Picture

Chapter 2 What is a Log?

Chapter 3 Generating Logs

Chapter 4 Log Storage Technologies

Chapter 5 Case study: syslog-ng

Chapter 6 Covert logging

Chapter 7 Analysis Goals, Planning and Preparation: What Are We Looking for?

Chapter 8 Simple Analysis Techniques

Chapter 9 Filtering, Matching and Correlation

Chapter 10 Statistical Analysis

Chapter 11 Log Data Mining

Chapter 12 Reporting and Summarization

Chapter 13 Visualizing Log Data

Chapter 14 Logging Laws and Logging Mistakes

Chapter 15 Tools for Log Analysis and Collection

Chapter 16 Log Management Procedures: Escalation, Response

Chapter 17 Attacks against logging systems

Chapter 18 Logging for Programmers

Chapter 19 Logs and Compliance

Chapter 20 Planning Your Own Log Analysis System

Chapter 21 Cloud Logging

Chapter 22 Log Standard and Future Trends