Logging&monitoring

From ICO wiki
Jump to navigationJump to search

Logging and Monitoring - Logging Solution - Graylog

Team: Artur Ovtsinnikov, Mohanad Aly, Etienne Barrier, Meelis Hass

Group : Cyber Security Engineering (C21)

Page Created: 18 September 2016

‎Last modified: ‎ 28 September 2016

Aim of this page

The Aim of this wiki page is to give an introduction to Logging and Monitoring application called Graylog, what are the main benefits of it and how to install it on Ubuntu Machine.

  • logging and monitoring.
  • The best solution for logging
  • Threats.
  • Securing during logging

Topology of the system

Desktop machine

Topology []

Begin with the basic setup, network configuration and make the machine has internet access which the ip address of the machine is 192.168.56.100

Server machine ip address 192.168.56.200

  • Can be connected over ssh with student@192.168.56.200
  • Also can connect with other IP address ssh student@10.10.10.10

IDS ip address 192.168.56.201

Starting to update an upgrade for all machines

  • First be super user sudo -i

apt-get update

apt-get upgrade

Initial Setup

Summary

See also

References