BAC-L3-OPS-108
Logging and incident search
Logs only help whoever can find them: central collection, indexing, retention and cost.
- Level
- L3 — Infrastructure engineer
- Duration
- 3 h
- Maintainer
- DevOps / Blockchain Infrastructure Engineer
Learning objectives
- 01Centralise logs across a node fleet
- 02Trace an incident within a large volume
- 03Define a sustainable retention policy
Guided lab
Centralise logs and find the cause of an incident injected by the instructor.
Independent lab
Cost out retention and propose a policy BAC can sustain.
Security angle
A log can contain sensitive data: filter before centralising, not after.
Assessment
Incident located and root cause identified within the allotted time.