On 9/11/18 6:52 AM, Stefan G. Weichinger wrote: > > At a customer we were asked to log/protocol all my administrative > activity for potential audits etc > > My admin-work is basically 98% ssh and maybe some additional tasks done > via virt-manager (logging the work inside the VMs there is another topic > ... I realize that right now). > > Is there a recommended way to track the logs? Specific setup for > syslog-ng or in my case journald? > > Maybe I should setup remote syslog here? > >
A bit over-the-top but here is 'LogDevice' which is now opensource. https://code.fb.com/core-data/logdevice-a-distributed-data-store-for-logs/ hth, James
