Operations | Monitoring | ITSM | DevOps | Cloud

Log management software operates on the basis of receiving, storing, and analyzing different types of log format files. There are several of these standardized log formats that are most commonly generated by a wide assortment of different devices and systems. As such, it is important to understand how they operate and differ from one another so that you can use them the right way, as well as avoid some common mistakes.

In the previous post, we covered some of the frameworks accessible by kernel extensions that provide information about file system, process, and network events. These frameworks included the Mandatory Access Control Framework, the KAuth framework, and the IP/socket filter frameworks. In this post, we will go into the various tips and tricks that can be used in order to obtain even more information regarding system events.

Today’s business needs make it virtually impossible to function without relying on an extensive network of partners and third-party providers. An IBM study found that 70 percent of businesses were looking to increase their external partnerships.

Recently we released a new SNMP Trap input plugin in Telegraf 1.13. I’d like to tell you more about that plugin and how you can use it.

Happy New Year! We’re starting 2020 by sharing some exciting news. Today we announced that LogicMonitor has acquired Unomaly, an AIOps-centric logs analytics company headquartered in Stockholm! Unomaly’s technology focuses on the automatic detection of log anomalies to support fast, accurate root cause analysis in complex IT environments.

This year at BSidesDFW, my local security conference, I highlighted a continuing trend of adversaries using open source offensive tools. The talk reviewed one of these post-exploitation frameworks named Koadic and walked through different ways defenders can build behavioral detections through the use of Event Query Language (EQL).

We're happy to announce an initial alpha release of a new Rust client for Elasticsearch! You can find it on crates.io with the crate name elasticsearch and dive into the documentation to get started.

“If you can’t measure something to get results, you can’t possibly get better at it. Worse yet, you won’t know what you should be focusing on,” says Dennis Brazil, Sr. Engineering Manager, SRE Monitoring at PayPal. Brazil and his team needed a scalable end-to-end host monitoring solution to keep pace with the company’s infrastructure modernization to a container-based architecture.