Date: Tue, 23 Aug 2005 01:32:00 +0200 From: "Julian H. Stacey" <jhs@flat.berklix.net> To: Matt Ruzicka <matt@frii.com> Cc: freebsd-isp@freebsd.org Subject: Re: Creating a Log Retention Policy Message-ID: <200508222332.j7MNW0g7012196@fire.jhs.private> In-Reply-To: Message from Matt Ruzicka <matt@frii.com> of "Mon, 22 Aug 2005 16:38:43 MDT." <Pine.BSF.4.58.0508221636280.10962@elara.frii.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Matt Ruzicka wrote: > Last year I attended a session at USENIX on system logging in which the > instructor (Marcus Ranum) discussed the importance of having a clearly > defined (and enforced) log retention policy. From what I remember of this > portion of the lecture (the slides and my notes are lacking in details) he > stressed that this policy would help significantly in the case of > litigation, but it obviously would also give a solid policy for defining > expectations and maintaining consistency between servers. > > A year later (*cough, cough*) I've started to compile ideas for this > policy, but am having a bit of trouble finding good guidelines to follow. > > I was wondering if others currently had a clearly defined log retention > policy for their organization and, if so, how they went about creating it? > > Thanks in advance for any feedback. > > Matthew Ruzicka - Systems Administrator This seems a general Sys Admin issue appropriate to SAGE http://www.sage.org , rather than anything needing to be BSD specific. The search box on their site with "archival policy" shows this at top: --- This represents the suggested policy document outline as it appears in A Guide to Developing Computing Policy Documents published by the USENIX Assocation for the SAGE. The guide is part of the SAGE series Short Topics in System Administration. -- Julian Stacey Consultant Systems Engineer, Munich. http://berklix.com Mail in Ascii (Html = Spam). Ihr Rauch = mein allergischer Kopfschmerz.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200508222332.j7MNW0g7012196>