hi, i am planning to design logging scheme for 3 different size of networks. I am confused what type of loggin scheme for small, large or very large sites. For small site syslog.conf can be customized for each host to get error or warning For large site i can use central logging system to keep the flood of info managable But for very large site what can i use? i have heard of distributed logging system but i am not sure it is good for very large site or not. Anyway, designing 3 sites 1.small 2. large and 3. very large For each site i am going to design logging policies management of log files condensing log files please suggest your ideas on it. thanks.
What enviroment are they in? i.e Web, Only Internal.... I would say you want to log more for security reasons if the majority of your servers are open to the public.
