Logging

Question 1

What are logs?

Answer 1

Data files that contain the accounting and audit trail for actions performed by a user on the computer or network.

Question 2

Where are system logs stored for Linux?

Answer 2

In the /var/log directory

Question 3

What are the 3 types of logs for the Windows system?

Answer 3

Security
System
Application

Question 4

What do Security Logs track?

Answer 4

Logs the events such as successful and unsuccessful user logins to the system

Question 5

What do System Logs track?

Answer 5

Logs the events such as system shutdowns and driver failures

Question 6

What do Application Logs track?

Answer 6

Logs the events for the OS and third-party applications.

Question 7

Where do you find the logs for Windows?

Answer 7

In the Event Viewer app

Question 8

Where do you want to consolidate all the logs into a single repository?

Answer 8

A SYSLOG server

Note: This is a much more efficient way to look at logs

Question 9

What is a SYSLOG?

Answer 9

This is an app that takes all of the logs from all necessary places in a network and consolidates them in an easier to read space. It uses PORT 514 over UDP>