Linux Security Podcast
Linux Security Podcast
Atomicorp
OSSEC, SIEM and Logging - Linux Security Podcast Ep. 4
13 minutes Posted May 4, 2018 at 6:57 pm.
0:00
13:30
Download MP3
Show notes

Logging is important for at least two reasons. Engineers need to know what is going on so they can figure out if something bad is happening and fix it. Bigger companies also have the need to capture logs to comply with a variety of regulations and business compliance requirements. SIEM has become popular for log aggregation and visualization but there are other open source tools such as OSSEC that provide similar functionality. Atomicorp CEO Mike Shinn walks through his experience with logging, SIEM and OSSEC approaches and breaks down what is important and how the space has evolved over the past 20 years, including the introduction of automation.