Izixhobo ezibalulekileyo zokujonga iilog zeseva: Isikhokelo esipheleleyo

Ukulawula iiseva kubandakanya ukujongana nemingeni emininzi yobuchwephesha, enye yezona zinto zibalulekileyo kukujonga iilog ukuqinisekisa impilo, ukusebenza, kunye nokhuseleko lweziseko zophuhliso. Nangona eli gama lisenokuvakala ngathi lobuchwephesha, ukubaluleka kwalo okubalulekileyo kwiimeko zemveliso akufanele kujongwe. Ukuqokelelwa, uhlalutyo, kunye nokubonwa kweelog ngokufanelekileyo kunokuba ngumahluko phakathi kokulindela isoyikiso sokhuseleko lwe-cyber kunye nokubanjwa ungalindelanga yingxaki ebalulekileyo ngexesha leeyure zomsebenzi.

Kule nqaku, siza kujonga kwihlabathi lezixhobo zokubeka esweni iilog zeseva , sigubungela yonke into ukusuka kwiindlela ezilula nezisimahla ukuya kwizisombululo zorhwebo eziphambili. Esi sisixhobo esibalulekileyo kubalawuli beenkqubo abanamava kunye nabo baqalayo kwihlabathi lolawulo lwenkonzo yeseva kunye nelifu.

Kutheni kubaluleke kangaka ukujonga iilog zeseva?

Iilog ziyirekhodi ephilayo yayo yonke into eyenzekayo kwiiseva zethu. Ukususela kwimizamo yokufikelela kunye neempazamo ukuya kutshintsho loqwalaselo, imizamo yokungena, kunye nokusilela kwehardware. Ukungazinaki ezi log kufana nokuqhuba imoto ngaphandle kokujonga kwideshibhodi : ingasebenza okwethutyana, kodwa kungekudala, kuza kuvela iingxaki.

• Ukubona kwangethuba izisongelo: Uhlaselo lwe-cyber luhlala lushiya imiqondiso kwiingxelo ngaphambi kokuba zenze umonakalo wokwenene. Izixhobo ezikhethekileyo zinokuhlalutya ezi ngxelo kwaye zivuse izilumkiso malunga nemisebenzi ekrokrisayo.
• Ukusombulula ngokukhawuleza kwezehlo: Xa kukho into engahambi kakuhle, iilogs zingumthombo ophambili wolwazi lokuqonda okwenzekileyo nendlela yokukulungisa.
• Uphicotho-zincwadi kunye nokuthobela imithetho: Kwimizi-mveliso emininzi, kunyanzelekile ukugcina iirekhodi ezineenkcukacha ukubonisa ukuthotyelwa kwemigaqo yokhuseleko.

Iindidi zezixhobo zokujonga iilog kwiiseva

Okwangoku, kukho iintlobo ngeentlobo zezisombululo zokujonga iilog ezikhoyo. Ezinye zigxile kuphela ekuqokeleleni nasekugcineni, ngelixa ezinye zigxininisa kuhlalutyo oluphambili kunye nokubona ngeliso lexesha langempela. Ukukhetha isixhobo esifanelekileyo kuxhomekeke kakhulu kubungakanani beziseko zakho, uhlahlo-lwabiwo mali lwakho, kunye neenjongo ezithile zenkampani yakho.

Izixhobo zomthombo ovulekileyo

Imibutho emininzi ikhetha izisombululo ezivulelekileyo ngenxa yokuguquguquka kwazo kunye nexabiso lazo eliphantsi. Phakathi kwezona zidumileyo zezi:

• I-ELK Stack (i-Elasticsearch, i-Logstash, i-Kibana): Indawo esemthethweniLe suite idibanisa ukufakwa kweelog (iLogstash), ukugcinwa kunye nokukhangela (i-Elasticsearch), kunye nokubonwa (iKibana). Sisisombululo esinamandla nesisetyenziswa ngokwemodyuli, esifanelekileyo kumashishini amancinci nakwiinkampani ezinkulu.
• Greylog: Indawo esemthethweniIkuvumela ukuba uqokelele, udwelise, kwaye uhlalutye idatha yelog, ubonise imibuzo kunye needeshibhodi ezinokwenziwa ngokwezifiso. Iyakwazi ukwandiswa kwaye inomdibaniso olusebenziseka lula.
• I-Fleentd: Indawo esemthethweniEkuqaleni yaphuhliswa yiTreasure Data, iFluentd yenza kube lula ukuqokelelwa kweelogi ezidibeneyo ezivela kwimithombo eyahlukeneyo kwaye inokudityaniswa ngokulula nezinye iinkqubo okanye iidathabheyisi.
• I-Syslog-ng: Indawo esemthethweniUtshintsho lwe-syslog yakudala, inika uqwalaselo oluphambili kunye nenkxaso kwiintlobo ngeentlobo zemithombo kunye neeprotocol.

Izixhobo zokurhweba

Kwabo bafuna inkxaso yobugcisa, iimpawu eziphambili, okanye ukuhlanganiswa nezinye izisombululo zeshishini, kukho iimveliso zorhwebo ezikumgangatho ophezulu ezikhoyo. I-Splunk iye yaba ngumgangatho oqhelekileyo kwiinkampani ezininzi ezinkulu ngenxa yamandla ayo ohlalutyo anamandla, izilumkiso zexesha langempela, kunye nenkqubo yesicelo. I-Splunk ithandwa kakhulu kwiindawo ezinkulu ngenxa yokulula kwayo ekudibaniseni iilog nolwazi oluvela kwimithombo eyahlukeneyo.

Ngaphandle kweSplunk, ezinye iindlela eziphawulekayo ziquka:

• Ngelogi: Indawo esemthethweniInkonzo esekelwe kwilifu ekuvumela ukuba udibanise kwaye uhlalutye iilog ngokufanelekileyo. Ujongano lwayo lubonakala kakhulu kwaye luvumela ukukhangela ngokukhawuleza.
• I-Sumo Logic: Indawo esemthethweniIgxile kakhulu kuhlalutyo oluphambili, kunye nobukrelekrele bokwenziwa ukuze kuhambelane neziganeko kunye nokubona izinto ezingaqhelekanga.
• Uvimba wedatha: Indawo esemthethweniIdibanisa ukujonga iilog kwiqonga elibanzi lokujonga iziseko zophuhliso kunye nezicelo, elifanelekileyo kwiDevOps nakwiindawo zelifu.
• Umzila wephepha: Indawo esemthethweniUkulula kunye nesantya sokusetyenziswa zizinto ezimbini ezilungileyo, ezenzelwe abasebenzisi abafuna ukujonga iilog ngokulula.

Ukuthelekisa phakathi kwezixhobo zokujonga iilog ezidumileyo

Ukuze sikuncede wenze isigqibo, silungiselele uthelekiso siqwalasela iimpawu ezinje ngokulula kokusetyenziswa, ukwandiswa, ukwenziwa ngokwezifiso, kunye neendleko. Le theyibhile ishwankathela oko unokukulindela kwisisombululo ngasinye kwezi :

Isixhobo	Uhlobo	Ukusebenziseka ngokulula	Ukwahluka	Bonisa	Ixabiso
ELK Stack	Umthombo ovulekileyo	Iphantsi-phakathi (ifuna uqwalaselo)	Phezulu kakhulu	Excelente	Mahala (iindleko zeziseko zophuhliso)
Ngwevu	Umthombo ovulekileyo / urhwebo	Iphakathi	Alta	Ku lungile	Mahala / Ihlawulwe
kakuhle	Umthombo ovulekileyo	Iphantsi-phakathi	Alta	Ukuhlanganiswa kuxhomekeke	Mahala
I-Splunk	commercial	Alta	Phezulu kakhulu	Excelente	Intlawulo (ixabiso eliphezulu kuxhomekeke kumthamo)
Ngelogi	Urhwebo (Ilifu)	Phezulu kakhulu	Alta	Kulungile kakhulu	Intlawulo
Ingqondo kaSumo	Urhwebo (Ilifu)	Alta	Alta	Kulungile kakhulu	Intlawulo
Idatadog	Urhwebo (ii-SaaS)	Phezulu kakhulu	Phezulu kakhulu	Kulungile kakhulu	Intlawulo
Umzila wephepha	Urhwebo (Ilifu)	Phezulu kakhulu	Iphakathi	Ku lungile	Intlawulo

[i-url enxulumeneyo =» https://www.tecnoloblog.com/hardening-for-linux-servers/»]

Izinto ezibalulekileyo kwisisombululo esihle sokujonga iilog

Ngaphandle kokukhetha isixhobo esithile, kukho izinto ezithile ekungafanele zilahleke ukuze kujongwe i-log yeseva ngokufanelekileyo:

• Ingqokelela esembindini: Nokuba zingaphi iiseva onazo, kubalulekile ukuba iilog zibe kwindawo enye ukuze uzihlalutye kwaye udibanise iziganeko.
• Uhlalutyo lwexesha lokwenyani: Ukukwazi ukubona iingxaki ngoko nangoko kunokuthintela iintlekele zokwenyani zokusebenza.
• Ukubonwa okubonakalayo: Iideshibhodi kunye neegrafu zenza kube lula ukuqonda okwenzekayo kwinkqubo.
• Izilumkiso eziqwalaselweyo: Akwanelanga ukubona okwenzekileyo: kubalulekile ukufumana izilumkiso xa kwenzeka into engaqhelekanga.
• Isikali: Isixhobo esikhethiweyo kufuneka sikwazi ukukhula nawe kwaye sixhase ukwanda kwenani leengodo ngaphandle kokuqhekeka.

Indlela yokukhetha isixhobo esifanelekileyo

Ngaphandle koluhlu olungentla, kukho inani lezinto ezibalulekileyo ekufuneka uziqwalasele xa ukhetha isixhobo esifanelekileyo samaseva akho:

1. Inani leeseva kunye nomthamo welog: Ukulawula iwebhusayithi yakho akufani nokulawula iziseko zenkampani iyonke. Yenza uqikelelo olupheleleyo lwedatha ukuze ubone ukuba ufuna isisombululo esinokukhula kakhulu na.
2. Uhlahlo lwabiwo-mali: Izixhobo ezininzi ezivulelekileyo zisimahla, kodwa inkxaso yobungcali okanye iindlela eziphambili zihlala zihlawulwa.
3. Amava eqela: Ezinye izixhobo zifuna ulwazi oluphezulu lobuchwephesha. Vavanya ukuba iqela lakho lingakwazi na ukuzisingatha ngaphambi kokuba liziqalise.
4. Ukuhambelana neziseko zakho: Kubalulekile ukuba isixhobo esikhethiweyo sidityaniswe ngokulula nezinye iinkqubo kunye neenkonzo osele uzisebenzisa.
5. Ukuthobela imithetho nemigaqo: Ukuba uphatha idatha eyimfihlo okanye usebenza kwicandelo elilawulwayo, qiniseka ukuba esi sixhobo siyahlangabezana neemfuno zomthetho.

Iindlela ezilungileyo kunye neengcebiso zokujonga iilog

• Chaza ukuba zeziphi iilog ozifunayo: Musa ukurekhoda yonke into ngokuzenzekelayo. Khetha ukuba zeziphi iinkonzo okanye usetyenziso oluvelisa ulwazi oluhambelana neshishini lakho.
• Misela imigaqo-nkqubo yokugcina abantwana: Gcina iirekhodi ixesha elide kangangoko kufunekayo kuhlalutyo lwakho kunye neemfuno zomthetho, kodwa ngaphandle kokugqithisa kakhulu iinkqubo zakho zokugcina.
• Zenzela iimpendulo ngokuzenzekelayo: Ukuba isixhobo sakho siyakuvumela, lungiselela izikripthi ezizenzekelayo kwiimeko ezithile (ukuqalisa kwakhona, ukuvimba i-IP, njl.njl.).
• Qeqesha iqela lakho: Isixhobo esilungileyo asisebenzi ukuba akukho mntu waziyo ukusitolika. Sebenzisa eli thuba ukuqeqesha abaphathi kuhlalutyo lweelog kunye nokuphendula kwiziganeko.

Ikamva lokujonga iilog

Ukwenziwa kweshishini libe yidijithali kunye nokwanda kweziseko zophuhliso zelifu kuye kwanda isidingo sezisombululo zokubeka esweni eziphambili. Namhlanje, ukufunda koomatshini kunye neendlela zobukrelekrele bokwenziwa ziyafakwa kwizixhobo zokubeka esweni iilog . Oku kuvumela ukuchongwa kweepateni ezingaqhelekanga, ukuthintela iingxaki, kunye nokonga ixesha kumaqela e-IT.

Ukongeza, amaqonga amaninzi akhetha iimodeli zeSaaS (Software as a Service), nto leyo esusa isidingo sokugcina iiseva zawo kwaye ivumela ukufikelela ngokukhawuleza naphi na.

Ukwazi izixhobo zokubeka esweni iilog zeseva kuye kwaba yinto ebalulekileyo kuyo nayiphi na inkampani efuna ukusinda kwimeko-bume yezobuchwepheshe eyandayo. Ukusebenzisa inkqubo efanelekileyo akupheleli nje ekuphuculeni ukhuseleko kunye nokusebenza kodwa kukwalula umsebenzi weqela lobuchwephesha kwaye kunceda ukuqinisekisa ukuthotyelwa kweemfuno zomthetho.