It’s Friday, so you know what that means!
I like todays, because it’s another one of those it’s easy, but we either forget to check or believe it’s working but it may not be.
What is it? Event logging and dashboards. I’ll admit the dashboard part isn’t easy, but the event logging is. And I’m not just talking about your scripts(which you should be adding event logging to them when possible), I’m talking about any of your infrastructure that you manage. Even if you have alerting on, how do you know the alerting is actually working? Maybe your script or application you are using to go through the logs has an update but you don’t see it since you haven’t checked it in a month thinking it just works?
It’s always better to be proactive than reactive. Also while going through the logs you may find something else you want to start alerting for. Maybe you adding a new feature to your firewall or you added a print server and you want to setup alerting for those?
Hope you take out some time today and go through your logs, and if you’ve done that, do you have dashboards and/or alerting in place? If so, check those as well, and see if there is anyway you could improve it.
What scripts/modules/applications do you use to manage your event logs and/or create dashboards with?