[tor-bugs] #29393 [Internal Services/Tor Sysadmin Team]: Set up a loghost

[Tor Bug Tracker & Wiki]

#29393: Set up a loghost
-------------------------------------------------+---------------------
 Reporter:  ln5                                  |          Owner:  tpa
     Type:  task                                 |         Status:  new
 Priority:  Medium                               |      Milestone:
Component:  Internal Services/Tor Sysadmin Team  |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:                                       |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+---------------------

Comment (by anarcat):

 how do we do that? what's a loghost? just a syslog central server that
 receives everything? what about anonymisation? that's done on the remote
 hosts? what about non-syslog logs like apache?

 if we go the prometheus route for monitoring, we are also probably going
 to use grafana for graphing/trending, and they have an interesting project
 called [https://grafana.com/loki loki] to aggregate and parse logs that we
 might want to look into.

 another common alternative to syslog is
 [https://www.elastic.co/products/logstash logstash] which, combined with
 [https://www.elastic.co/ ElasticSearch] and
 [https://www.elastic.co/products/kibana Kibana] makes for the acronym
 "ELK" that's commonly deployed as a stack, with Granafa sometimes
 replacing Kibana...

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/29393#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online