Skip to main content

Sophos sheds 6% of staff after swallowing Secureworks

3 months 1 week ago
De-dupes some roles, hints others aren't needed as the infosec scene shifts

Nine days after completing its $859 million acquisition of managed detection and response provider Secureworks, Sophos has laid off around six percent of its staff.…

Iain Thomson

The Hidden Cost Of Compromise: Why HPC Still Demands Precision

3 months 1 week ago

PARTNER CONTENT: As the technology industry continues its shift towards AI dominance, an important schism is opening up that threatens to impact scientific progress, along with important humanitarian endeavors such as disaster response. …

The Hidden Cost Of Compromise: Why HPC Still Demands Precision was written by Timothy Prickett Morgan at The Next Platform.

Timothy Prickett Morgan

Streamline Your Logs: Exploring Rsyslog for Effective System Log Management on Ubuntu

3 months 1 week ago
by George Whittaker Introduction

In the world of system administration, effective log management is crucial for troubleshooting, security monitoring, and ensuring system stability. Logs provide valuable insights into system activities, errors, and security incidents. Ubuntu, like most Linux distributions, relies on a logging mechanism to track system and application events.

One of the most powerful logging systems available on Ubuntu is Rsyslog. It extends the traditional syslog functionality with advanced features such as filtering, forwarding logs over networks, and log rotation. This article provides guide on managing system logs with Rsyslog on Ubuntu, covering installation, configuration, remote logging, troubleshooting, and advanced features.

Understanding Rsyslog What is Rsyslog?

Rsyslog (Rocket-fast System for Log Processing) is an enhanced syslog daemon that allows for high-performance log processing, filtering, and forwarding. It is designed to handle massive volumes of logs efficiently and provides robust features such as:

  • Multi-threaded log processing

  • Log filtering based on various criteria

  • Support for different log formats (e.g., JSON, CSV)

  • Secure log transmission via TCP, UDP, and TLS

  • Log forwarding to remote servers

  • Writing logs to databases

Rsyslog is the default logging system in Ubuntu 20.04 LTS and later and is commonly used in enterprise environments.

Installing and Configuring Rsyslog Checking if Rsyslog is Installed

Before installing Rsyslog, check if it is already installed and running with the following command:

systemctl status rsyslog

If the output shows active (running), then Rsyslog is installed. If not, you can install it using:

sudo apt update sudo apt install rsyslog -y

Once installed, enable and start the Rsyslog service:

sudo systemctl enable rsyslog sudo systemctl start rsyslog

To verify Rsyslog’s status, run:

systemctl status rsyslog Understanding Rsyslog Configuration Rsyslog Configuration Files

Rsyslog’s primary configuration files are:

  • /etc/rsyslog.conf – The main configuration file

  • /etc/rsyslog.d/ – Directory for additional configuration files

Basic Configuration Syntax

Rsyslog uses a facility, severity, action model:

Go to Full Article
George Whittaker

Data Center Power Demand Almost Doubled in Virginia, Utility Says

3 months 1 week ago
The biggest utility in Virginia, home to the global hotspot Data Center Alley, saw demand from data centers in development almost double in the last half of 2024. From a report: Total data center power capacity under contract with Dominion Energy in Virginia, which includes projects from preliminary to advanced stages of development, increased to 40.2 gigawatts in December from 21.4 gigwatts in July, the company said on its earnings call Wednesday. Demand for power is surging with the development of data centers and artificial intelligence, along with manufacturing and the increasing electrification of the economy. Northern Virginia, which has the biggest concentration of the facilities in the world, has earned the nickname of Data Center Alley.

Read more of this story at Slashdot.

msmash

US lawmakers press Trump admin to oppose UK's order for Apple iCloud backdoor

3 months 1 week ago
Senator, Congressman tell DNI to threaten infosec agreements if Blighty won't back down

US lawmakers want newly confirmed Director of National Intelligence Tulsi Gabbard to back up her tough talk on backdoors. They're urging her to push back on the UK government's reported order for Apple to weaken iCloud security for government access.…

Brandon Vigliarolo