Using Puppet to Stand Up Centralized Logging and Metrics - PuppetConf 2014
3 likes1,849 views
Charles Dunbar presented on using Puppet to set up centralized logging and metrics. Centralized logging makes logs easy to search across all servers, saves space by deleting local logs, and makes it harder for attackers to hide activity. The demonstration used Puppet to configure Rsyslog, Logstash, Elasticsearch, and Kibana on Vagrant VMs to collect, parse, store, and visualize logs in real time for improved visibility into patterns and trends.
Using Puppet to Stand Up Centralized Logging and Metrics - PuppetConf 2014
- 1. USING PUPPET TO STAND UP CENTRALIZED LOGGING AND METRICS Presented by Charles Dunbar
- 2. WHO I AM charles@puppetlabs.com chuck_d - IRC
- 3. WHY CENTRALIZED LOGGING Easy to grep Able to delete local logs Save space Harder for attackers to hide tracks Compliance
- 4. VISUALIZING LOGS Easier to find patterns and trends
- 5. TOOLS USED Rsyslog + SSL Logstash, Elasticsearch, Kibana (ELK) Logstash-forwarder Puppet
- 6. DEMO Using Vagrant with Debian VMs Find all the files at https://github.com/charlesdunbar/PuppetConf2014
- 10. EXTRA LOGGING WITH LOGSTASH-FORWARDER
- 11. QUESTIONS?