Re:7 Good Rules to Log Exceptions
by Hexstream on Tuesday December 16, 2008 @01:29PM
(#399799)
I think a good approach might be:
Log everything, and then filter out the information you know won't be interesting with rules. The remainder is what's interesting (if it isn't, add to your rules to filter it out).
This way, if later on you're trying to track something which requires information you usually don't find interesting, you just update your rules and you have all you need.
Log everything, and then filter out the information you know won't be interesting with rules. The remainder is what's interesting (if it isn't, add to your rules to filter it out).
This way, if later on you're trying to track something which requires information you usually don't find interesting, you just update your rules and you have all you need.