Vibrant MCSE BOOT Camp Notes :
Back : Contents : MCSE :

Who Keeps the Log?

When determining what goes into the log, it is equally important to determine who will keep the log. Those responsible must agree on what will be kept and why. Simply telling those working on the server that they must keep a log will be insufficient. Keeping a log is often an unpleasant, time-consuming task. It often involves deliberately slowing down progress on a problem just for the sake of "paperwork." Being able to keep a log during a real crisis is a very difficult skill, but it is essential for preventing the crisis from recurring.

All Systems Administrators

All system administrators must be scrupulous record keepers. The system administrators are most responsible for the overall health of the system, and they will be the ones who have the task of restoring it to health when its gets sick. Thus, system administrators are responsible to both themselves and the organization to keep good records.

Users with Root Access

Any users who have system-level access to a computer or software under the umbrella must know what actions are to be logged. Anyone who has system-level access may make adjustments that can affect the system as a whole. These adjustments are all relevant to the logs. Again, it is important that anyone in a position to perform functions that should be logged agrees to update the logs as appropriate. A tradeoff to receiving root access is an understanding that logs must be kept.

back