How to Configuring Local Logging on Solaris 8 and Use Symantec Intruder Alert for Centralized Logging
Nolan Haisler · 2016
Logging is often a forgotten security friend for system administrators until a security breach has occurred. The security administrator then goes to look at the logs only to find that there are no logs, the logs are incomplete, or that the logs have been modified by the attacker himself to cover his tracks. To prevent this from happening, a system administrator should be prepared to have a good local logging system in place and perhaps even a central log server for archiving logs. In the case of a security breach or at... Copyright SANS Institute