The Linux Audit framework is a kernel feature (paired with userspace tools) that can log system calls. For example, opening a file, killing a process or creating a network connection. These audit logs can be used to monitor systems for […]
GDPR: Top 5 Logging Best Practices
The rather broad definition of personal data in the GDPR requires paying special attention to log data. GDPR and personal data in web server logs is a popular topic in many GDPR fora. For example, IP addresses or cookies might […]
Rsyslog eBook: Centralized Logging with Rsyslog
Centralizing logs to Elasticsearch? Of course, the first log shipper that comes to mind is Logstash. When you get into it, you realize centralizing logs often implies a bunch of things, and Logstash isn’t the only log shipper that fits […]
How to Detect Malicious Traffic in Your Server Logs: Sematext + Access…
Do you know what portion of your traffic comes from bots? Do you know which bots are good and which ones are bad? Do you know what the bad bots are up to? We all know Googlebot and consider it […]
Metrics & Logs – Together or Separate?
Every modern organization depends on software, and where there is software there are metrics and logs and, one would hope, monitoring of these two critically important types of data. Operations teams have traditionally used two separate sets of tools – […]
X-Pack Alternatives
Last updated on Jan 15, 2018 X-Pack as Splunk Alternative People love Splunk. But not its price. So people are always on a lookout for a good Splunk alternative. Many of those people migrated from Splunk to ELK Stack or […]
Log Event Context
Being able to see the context of a specific log message is one of those highly sought out features in Kibana that still seems to be missing (though we can see the light at the end of that long tunnel […]
S3 Archiving & Longer Retention for Logs
Need to have your recent logs searchable for your DevOps team(s) to troubleshoot issues, but also need to archive old logs for compliance reasons? Many organizations need that and Sematext Cloud makes that simple. You can certainly simply pick […]
Elasticsearch 5.x and Kibana 5.x
We’ve refreshed not only the Sematext Cloud UI, but also our backend, or one of them at least. Last week, we’ve updated Elasticsearch to the latest 5.x version. Along with it, we’ve updated the integrated version of Kibana to which […]