Re:Central Logging with Open Source Software
by swombat on Sunday June 17, 2012 @12:47PM
(#4123262)
The standard way used to be to use write-only media. For example, if you log to a server which writes the logs incrementally to a DVD writer, you can be fairly certain that the logs won't be erased...
[ Parent
| on HN ]
That's only true if you have software that can mount arbitrary past sessions, which is rarely the case. When you put in a dvd, what gets mounted is the latest session -- which is supposed to also include all previous sessions, but doesn't have to.