Post by Mathias Brandstetter
My Proxmox lab’s logs were well kept and never read. Now Graylog reads them: three Data Nodes that never move, one server that moves when it has to, and every remote address in one field, so one search follows one visitor everywhere.
Seven failure tests found a firewall that had never been on. A Data Node rebuild went from 39 minutes to 9.
Write-up and a 70-page PDF:
behindtheconsol