LOG MANAGEMENT WITH OPEN SOURCE TOOLS

In all systems within the information technologies and in the applications on these systems, the transactions performed by users and system administrators are recorded in accordance with the legal regulations and corporate policies. These records, which are one of the basic and most important components of cyber security, are given the name “log”. It has become imperative to know the log management processes which are critical to the confidentiality, integrity and accessibility of information. Systems and applications produce a continuous and high number of logs. To analyze these logs and to make sense, log management software should be used. Vulnerability and intrusion attempts can be detected using the capabilities of these softwares. The relevant system administrator can be informed with automatic warnings and measures against these attacks. The purpose of this study is to explain log management processes and exhibit how to use logs to pre-identify attacks against systems. As a log management tool, Graylog application is preferred for high performance, fast indexing and free of charge.