Hardening Linux is oriented towards Unix/Linux administrators who need to build upon beginner knowledge of basic security. This book covers operating systems and firewalls with iptables, email servers, connecting to your hosts and more.
In Chapter 5, "Understanding Logging and Monitoring, Turnbull compares the syslog daemon to its more powerful and more secure successor, syslog-NG. He also shows readers the Simple Event Correlation tool for highlighting events in logs.
Chapter 5 "Understanding Logging and Log Monitoring," is excerpted from Hardening Linux by James Turnbull, published in February 2005, by Apress (ISBN: 1-59059-444-4). Copyright © 2005, Apress. All rights reserved. Reprinted with permission by Apress.
This was first published in September 2006