hi, i am planning to design logging scheme for 3 different size of networks. I am confused what type of loggin scheme for small, large or very large sites.
For small site syslog.conf can be customized for each host to get error or warning
For large site i can use central logging system to keep the flood of info managable
But for very large site what can i use? i have heard of distributed logging system but i am not sure it is good for very large site or not. Anyway, designing 3 sites 1.small 2. large and 3. very large
For each site i am going to design
- logging policies
- management of log files
- condensing log files
please suggest your ideas on it.