Question

1.Identify logs that might be of use when an organization first attempts to start aggregating logs. Why did you choose the logs that you choose? What information might you hope to gain from these logs? Do you need to worry about resources to collect, store, and aggregate these logs? 2.Given unlimited resources, what logs would you collect? Does this list vary from what you identified from when your organization would first start collecting logs? Why or why not? 3.Some admins (typically sys admins) want to collect only infrastructure logs, while other admins (security admins) prefer to grab everything. What are the pros and cons for the two collection preferences? What would the overall goals for each be? Why are they different? Which side would you fall on, why? 4.Identify two products or methods that can be used to aggregate logs. Briefly describe them and what techniques that they use to gather the logs. What size organizations would these products or methods work for? Why?

          1.Identify logs that might be of use when an
organization first attempts to start aggregating logs.
Why did you choose the logs that you choose?
What information might you hope to gain from these
logs? Do you need to worry about resources to
collect, store, and aggregate these logs?
2.Given unlimited resources, what logs would you
collect? Does this list vary from what you identified
from when your organization would first start
collecting logs? Why or why not?
3.Some admins (typically sys admins) want to
collect only infrastructure logs, while other admins
(security admins) prefer to grab everything. What
are the pros and cons for the two collection
preferences? What would the overall goals for each
be? Why are they different? Which side would you
fall on, why?
4.Identify two products or methods that can be used
to aggregate logs. Briefly describe them and what
techniques that they use to gather the logs. What
size organizations would these products or methods
work for? Why?

1.Identify logs that might be of use when an
organization first attempts to start aggregating logs.
Why did you choose the logs that you choose?
What information might you hope to gain from these
logs? Do you need to worry about resources to
collect, store, and aggregate these logs?
2.Given unlimited resources, what logs would you
collect? Does this list vary from what you identified
from when your organization would first start
collecting logs? Why or why not?
3.Some admins (typically sys admins) want to
collect only infrastructure logs, while other admins
(security admins) prefer to grab everything. What
are the pros and cons for the two collection
preferences? What would the overall goals for each
be? Why are they different? Which side would you
fall on, why?
4.Identify two products or methods that can be used
to aggregate logs. Briefly describe them and what
techniques that they use to gather the logs. What
size organizations would these products or methods
work for? Why?

Added by Monica Y.

Question

Please give Ace some feedback