Using SEC

• Autores: David Lang
• Localización: ;login:: the magazine of USENIX & SAGE, ISSN 1044-6397, Vol. 38, Nº. 6, 2013 (Ejemplar dedicado a: Security), págs. 38-43
• Idioma: inglés
• Texto completo no disponible (Saber más ...)
• Resumen

  • As you build your enterprise logging infrastructure (as discussed in the prior articles in this series [1]), one of the most valuable things that you can do is to have something watch them and generate alerts when things go wrong. There are a lot of tools out there that can be used for this. One good, free tool is Simple Event Correlator (SEC) [2]. In this article, I will provide an introduction to SEC, how to use it, and the capabilities that it provides. In a future article, I will go into detail about how to tune your SEC installation to be able to handle high volumes of logs.