Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on Log Management, Log Analytics and related technologies.

Find the Sweet Spot of Splunk Enterprise Upgrades

Splunk adds and updates features and functions to Splunk Enterprise regularly to keep pace with innovation and reduce risk. In fact, Splunk releases these updates on the Splunk Cloud platform continually. For on-prem customers, Splunk releases two levels of software updates to Splunk Enterprise. On-prem customers benefit from the continual updates to the Cloud platform because features, functions, and updates are thoroughly road-tested and hardened when they are released in a major version update.

Improving Kubernetes Clusters' Efficiency with Log Management

Log management plays an important role in helping to debug Kubernetes clusters, improve their efficiency, and monitor them for any suspicious activity. Kubernetes is an open-source cluster management software designed for the deployment, scaling, and operations of containerized applications.

dormakaba EMEA Finds Reliable, Secure and Scalable Logging with Logz.io

As the team responsible for building dormakaba’s first cloud-access control solution, Exivo, the Cloud Development team at dormakaba AS EMEA needed a logging solution that with scalable logging throughout their global environment, handle a huge amount of throughput, be piped through an API, and remain highly secure so it could be implemented on the doors and entry systems the company produces. Logz.io was the perfect fit for these requirements.

SIEM Yara Rules

The tongue-in-cheek named malware detection tool, Yet Another Recursive Acronym (YARA) is described as “the pattern-matching Swiss Army knife for malware researchers (and everyone else)”. The Sumo Logic Cloud SIEM Enterprise platform is one of the first SIEM solutions to incorporate it as a built-in feature. This gives blue teamers an additional layer of detection built into the SIEM.

How Loki Reduces Log Storage

Several months ago, Bryan Boreham introduced a few changes to Cortex that massively reduced its storage requirements. The changes were quite simple and altogether had a nice benefit of using almost 3x less data storage than prior versions. Since Loki shares a lot of code with Cortex, could we use these ideas to the same effect? (Spoiler alert: Yes, we can!)

Tutorial: Shipping AWS Kinesis Data Stream Logs to Logz.io

Kinesis is a managed, high-performance and large-capacity service for real time processing of (live) streaming data. Prominent users include Netflix, Comcast and Major League Baseball. Its design to let it grab data from multiple sources at the same time and to scale processing within EC2 instances.

Sumo Logic Kubernetes Webinar

Maximize your Kubernetes management by using the Data Explorer, which offers a service-oriented view of your cluster and allows you to seamlessly correlate logs and metrics as you accelerate your workflow. In this session, Sumo Logic Solutions Engineer, Dan Reichert, discusses how to navigate your Kubernetes environment and understand exactly what you should be monitoring across all workflows.

Mac system extensions for threat detection: Part 3

This is the third and final post of a three-part series on understanding kernel extension frameworks for Mac systems. In part 1, we reviewed the existing kernel extension frameworks and the information that these frameworks can provide. In part 2 we covered techniques that could be used in kernel to gather even more details on system events. In this post, we will go into the new EndpointSecurity and SystemExtensions frameworks.