Operations | Monitoring | ITSM | DevOps | Cloud

Logging

The latest News and Information on Log Management, Log Analytics and related technologies.

Monitoring Microsoft SQL Server login audit events in Graylog

One of the most important events you should be monitoring on your network is failed and successful logon events. What comes to most people’s minds when they think of authentication auditing is OS level login events, but you should be logging all authentication events regardless of application or platform. Not only should we monitor these events across our network, but we should also normalize this data so that we can correlate events between these platforms.

A Simplified Guide to Kubernetes Monitoring

The open-source Kubernetes platform has become the de facto standard for deploying, managing, and scaling containerized services and workloads. In fact, 83% of DevOps teams are using Kubernetes to deploy containerized applications in production, taking advantage of its workload orchestration and automation capabilities to optimize the software development process and reduce web server provisioning costs.

How to Collect .NET Application Logs with OpenTelemetry

In the realm of modern software development, achieving true observability is paramount for understanding application behavior and performance. This demonstration focuses on a.NET application that harnesses the capabilities of OpenTelemetry to seamlessly integrate logging and tracing functionalities. OpenTelemetry, a key player in the Cloud Native Computing Foundation, provides a unified framework for comprehensive observability.

Micro Lesson: Monitoring and Troubleshooting with AWS Observability Solution

This video introduces Sumo Logic's AWS Observability solution, which is an all-in-one approach to give visibility into the important elements of the cloud infrastructure and assist in troubleshooting complex issues. This video further describes the features of the observability solution such as pre-built dashboards, prepackaged log searches, and the out-of-the-box alerts that help in monitoring and troubleshooting.

Large Enterprise Cuts Elasticsearch and SIEM Costs by 40% with Observo.ai

A large, global Data Management and AI software company with over 5,000 customers across more than 100 countries had seen unprecedented growth (more than 30% year over year) in telemetry data from their multi-cloud infrastructure being sent to the Elasticsearch Observability and SIEM Platform. The growth of this data contributed to a multi-million dollar price tag for Elasticsearch.

Observo.ai Enables Global E-Commerce Giant to Slash Splunk Costs by 50%

A Global 1000 E-commerce company struggled with the rapid growth in telemetry data that their security team analyzes with Splunk, Grafana, and other Observability tools in the cloud. Specifically, the increase in VPC Flow log and Firewall log volumes caused a spike in Splunk costs on certain data sets and triggered daily indexing limit overage fees. As this deluge of data began piling up in block storage within their Splunk index, the team saw corresponding spikes in storage costs.

Key Value Parser Delivers Useful Information Fast

Parsers make it easier to dig deep into your data to get every byte of useful information you need to support the business. They tell Graylog how to decode the log messages that come in from a source, which is anything in your infrastructure that generates log messages (e.g., a router, switch, web firewall, security device, Linux server, windows server, an application, telephone system and so on).

How to create log sinks

Are you wondering how you can route your Google Cloud logs to your desired destination? Then check out this video, where we introduce you to log sinks which can be used to route logs to various supported destinations, walk you through how it works and the list of supported destinations to which logs can be routed. It covers the different use cases and scenarios, where the logs sinks can be very useful. We’ll also demonstrate how to create and configure an aggregated log sink that sends all VPC flow logs to BigQuery.