Assume that you are responsible for administering ten Linux servers with the following characteristics:
- There are 8 servers running Red Hat Linux (RHL) 7.3 and 2 running RHL 8.0. At this point, the 2 servers running version 8.0 are only test servers.
- One of the RHL 7.3 servers runs sendmail to process email.
- One of the RHL 7.3 servers runs Apache as Web servers.
- One of the RHL 7.3 servers runs Oracle9iDB as a database server.
- The remaining RHL 7.3 servers simply offer file and print services.
Understanding the current makeup of the environment , design a solution that allows all servers and applications to log data on one central server. For purposes of this exercise, one of the test servers can be converted into a log collection server. You must answer the following questions:
1. What software would you use to collect all logs?
2. What software or configuration changes would you institute on the servers and applications to remotely log data?
3. Assuming there are no firewalls to block network communication how would each application and server send data to the central log server?
4. How long would you keep the log data on the central log server? Would you archive the data onto other media? If so, what media would you use and how would you perform the archive?