Enterprise Networking Planet: Enhance Security with a Linux Logging Server

“Increasing security often means decreasing convenience. But
when it comes to using a remote logging server, you get both
security and convenience. All of your important logs are in one
convenient-to-you location. If a host is compromised by a cracker,
the logfiles are out of the varmint’s reach. In the event of a
system failure the logs are preserved, so you can conduct a proper
post-mortem.

“The sysklogd package has long been the standard logging utility
for Linux. It contains syslogd (system logging daemon), klogd
(kernel logging daemon) and the usual man pages and configuration
files. syslogd captures and directs the logging output from local
and remote processes, and from the kernel via klogd. Virtually all
Linux distributions ship with a decent default setup that does the
job for most users: startup scripts, rotations, and
logfiles…”

Complete Story