\u0110\u01a1n gi\u1ea3n h\u00f3a c\u1ea5u tr\u00fac ghi log<\/strong><\/p>\nTrong khi nhi\u1ec1u h\u1ec7 th\u1ed1ng SIEM v\u00e0 c\u00f4ng c\u1ee5 ph\u00e2n t\u00edch log c\u00f3 c\u00e1c c\u00f4ng c\u1ee5 chuy\u1ec3n ti\u1ebfp log c\u1ee7a ri\u00eang m\u00ecnh, vi\u1ec7c s\u1eed d\u1ee5ng syslog-ng cho c\u1ea3 vi\u1ec7c thu th\u1eadp log trung t\u00e2m v\u00e0 chuy\u1ec3n ti\u1ebfp \u0111\u1ebfn c\u00e1c c\u00f4ng c\u1ee5 ph\u00e2n t\u00edch c\u00f3 th\u1ec3 \u0111\u01a1n gi\u1ea3n h\u00f3a ki\u1ebfn tr\u00fac c\u1ee7a b\u1ea1n. Th\u00f4ng th\u01b0\u1eddng, b\u1ea1n mu\u1ed1n l\u01b0u h\u1ea7u h\u1ebft c\u00e1c log message \u0111\u1ebfn \u0111\u1ec3 l\u01b0u tr\u1eef d\u00e0i h\u1ea1n v\u00e0 ch\u1ec9 g\u1eedi m\u1ed9t ph\u1ea7n nh\u1ecf \u0111\u1ec3 ph\u00e2n t\u00edch th\u00eam. M\u1ed7i c\u00f4ng c\u1ee5 ph\u00e2n log y\u00eau c\u1ea7u m\u1ed9t t\u1eadp h\u1ee3p tin nh\u1eafn kh\u00e1c nhau.<\/p>\n
Cho ph\u00e9p c\u00e1c c\u00f4ng c\u1ee5 chuy\u1ec3n ti\u1ebfp log kh\u00e1c nhau \u0111\u1ecdc c\u00e1c log \u0111\u01b0\u1ee3c l\u01b0u \u0111\u1ec3 l\u01b0u tr\u1eef d\u00e0i h\u1ea1n c\u00f3 th\u1ec3 l\u00e3ng ph\u00ed t\u00e0i nguy\u00ean, v\u00ec b\u1ea1n g\u1eedi t\u1ea5t c\u1ea3 log b\u1eb1ng nhi\u1ec1u \u1ee9ng d\u1ee5ng qua network. V\u1ec1 ph\u00eda ph\u00e2n t\u00edch, x\u1eed l\u00fd nhi\u1ec1u log h\u01a1n l\u00e0m t\u0103ng chi ph\u00ed, \u0111\u1eb7c bi\u1ec7t \u0111\u1ed1i v\u1edbi c\u00e1c \u1ee9ng d\u1ee5ng th\u01b0\u01a1ng m\u1ea1i \u0111\u01b0\u1ee3c c\u1ea5p ph\u00e9p theo kh\u1ed1i l\u01b0\u1ee3ng log. L\u01b0u c\u00e1c ph\u1ea7n nh\u1ecf c\u1ee7a log v\u00e0o t\u1ec7p \u0111\u1ec3 \u0111\u1ecdc c\u0169ng l\u00e3ng ph\u00ed kh\u00f4ng gian \u0111\u0129a v\u00e0 y\u00eau c\u1ea7u c\u00e1c \u1ee9ng d\u1ee5ng b\u1ed5 sung.<\/p>\n
B\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng syslog-ng \u0111\u1ec3 chuy\u1ec3n ti\u1ebfp log \u0111\u1ebfn c\u00e1c h\u1ec7 th\u1ed1ng SIEM v\u00e0 c\u00f4ng c\u1ee5 ph\u00e2n t\u00edch kh\u00e1c nhau, b\u1ea1n \u0111\u1ea3m b\u1ea3o r\u1eb1ng c\u00e1c b\u00ean nh\u1eadn ch\u1ec9 nh\u1eadn \u0111\u01b0\u1ee3c c\u00e1c log m\u00e0 h\u1ecd c\u1ea7n, m\u00e0 kh\u00f4ng t\u1ed1n th\u00eam kh\u00f4ng gian \u0111\u0129a hay \u1ee9ng d\u1ee5ng b\u1ed5 sung.<\/p>\n
<\/p>\n
T\u0103ng c\u01b0\u1eddng hi\u1ec7u su\u1ea5t<\/strong><\/p>\nElasticsearch, Sumo Logic, v\u00e0 Splunk cung c\u1ea5p c\u00e1c API d\u1ef1a tr\u00ean HTTP \u0111\u1ec3 thu th\u1eadp log. Vi\u1ec7c g\u1eedi log tr\u1ef1c ti\u1ebfp \u0111\u1ebfn c\u00e1c API n\u00e0y \u0111\u01a1n gi\u1ea3n h\u00f3a ki\u1ebfn tr\u00fac ghi log c\u1ee7a b\u1ea1n v\u00e0 n\u00e2ng cao hi\u1ec7u su\u1ea5t. \u0110\u00edch http()<\/code> h\u1ed7 tr\u1ee3 nhi\u1ec1u worker v\u00e0 c\u00e2n b\u1eb1ng t\u1ea3i, cho ph\u00e9p syslog-ng s\u1eed d\u1ee5ng nhi\u1ec1u l\u00f5i CPU v\u00e0 k\u1ebft n\u1ed1i m\u1ea1ng \u0111\u1ec3 g\u1eedi c\u00e1c log massage. T\u00ednh n\u0103ng n\u00e0y cho ph\u00e9p syslog-ng g\u1eedi log \u0111\u1ebfn nhi\u1ec1u n\u00fat ingest song song, c\u00e2n b\u1eb1ng t\u1ea3i.<\/p>\nNh\u1eefng kh\u1ea3 n\u0103ng n\u00e0y \u0111\u01a1n gi\u1ea3n h\u00f3a c\u1ea5u h\u00ecnh c\u1ee7a b\u1ea1n, v\u00ec m\u1ed9t node syslog-ng c\u00f3 th\u1ec3 cung c\u1ea5p d\u1eef li\u1ec7u cho nhi\u1ec1u node Splunk ho\u1eb7c Elasticsearch m\u00e0 kh\u00f4ng c\u1ea7n m\u1ed9t \u1ee9ng d\u1ee5ng ho\u1eb7c thi\u1ebft b\u1ecb c\u00e2n b\u1eb1ng t\u1ea3i chuy\u00ean d\u1ee5ng. Trong khi \u0111\u00edch tcp()<\/code> c\u0169ng cung c\u1ea5p c\u00e1c kh\u1ea3 n\u0103ng t\u01b0\u01a1ng t\u1ef1, ch\u00fang b\u1ecb gi\u1edbi h\u1ea1n h\u01a1n. T\u00e0i li\u1ec7u c\u1ee7a Cribl c\u0169ng khuy\u1ebfn ngh\u1ecb s\u1eed d\u1ee5ng \u0111\u00edch elasticsearch-http()<\/code>thay v\u00ec giao th\u1ee9c syslog v\u00ec nh\u1eefng l\u00fd do n\u00e0y.<\/p>\n <\/p>\n
Ti\u1ebfp t\u1ee5c c\u1ea3i ti\u1ebfn<\/strong><\/p>\nV\u1edbi vi\u1ec7c HTTP tr\u1edf th\u00e0nh giao th\u1ee9c ph\u1ed5 bi\u1ebfn cho vi\u1ec7c v\u1eadn chuy\u1ec3n log, vi\u1ec7c ghi log \u0111\u00e3 v\u01b0\u1ee3t qua giao th\u1ee9c syslog truy\u1ec1n th\u1ed1ng. M\u1eb7c d\u00f9 m\u1ed9t s\u1ed1 API ho\u1ea1t \u0111\u1ed9ng qua HTTP nh\u01b0ng kh\u00f4ng th\u1ec3 tri\u1ec3n khai b\u1eb1ng \u0111\u00edch http()<\/code> c\u1ee7a syslog-ng, nhi\u1ec1u \u1ee9ng d\u1ee5ng v\u00e0 d\u1ecbch v\u1ee5 s\u1eed d\u1ee5ng Elasticsearch Bulk API ho\u1eb7c Splunk HEC API. Th\u01b0\u1eddng th\u00ec t\u1ea5t c\u1ea3 nh\u1eefng g\u00ec b\u1ea1n c\u1ea7n l\u00e0m l\u00e0 x\u00e1c \u0111\u1ecbnh \u0111\u00fang URL c\u1ea7n s\u1eed d\u1ee5ng, gi\u00fap b\u1ea1n kh\u00f4ng c\u1ea7n ph\u1ea3i \u0111\u1ecdc t\u00e0i li\u1ec7u API v\u00e0 t\u1ea1o m\u1ed9t \u0111\u00edch d\u1ef1a tr\u00ean http()<\/code> t\u1eeb \u0111\u1ea7u.<\/p>\n <\/p>\n
V\u1ec1 DT Asia<\/strong><\/p>\nDT Asia \u0111\u01b0\u1ee3c th\u00e0nh l\u1eadp n\u0103m 2007 v\u1edbi s\u1ee9 m\u1ec7nh \u0111\u01b0a c\u00e1c gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt CNTT ti\u00ean phong kh\u00e1c nhau t\u1eeb Hoa K\u1ef3, Ch\u00e2u \u00c2u v\u00e0 Israel gia nh\u1eadp th\u1ecb tr\u01b0\u1eddng.<\/p>\n
Hi\u1ec7n t\u1ea1i, DT Asia \u0111\u00e3 l\u00e0 m\u1ed9t nh\u00e0 ph\u00e2n ph\u1ed1i gi\u00e1 tr\u1ecb gia t\u0103ng trong khu v\u1ef1c \u0111\u1ed1i v\u1edbi c\u00e1c gi\u1ea3i ph\u00e1p an ninh m\u1ea1ng, cung c\u1ea5p c\u00f4ng ngh\u1ec7 ti\u00ean ti\u1ebfn cho c\u00e1c t\u1ed5 ch\u1ee9c ch\u00ednh ph\u1ee7 tr\u1ecdng y\u1ebfu c\u0169ng nh\u01b0 c\u00e1c kh\u00e1ch h\u00e0ng t\u01b0 nh\u00e2n l\u1edbn bao g\u1ed3m c\u00e1c ng\u00e2n h\u00e0ng to\u00e0n c\u1ea7u v\u00e0 c\u00e1c c\u00f4ng ty trong danh s\u00e1ch Fortune 500. V\u1edbi c\u00e1c v\u0103n ph\u00f2ng v\u00e0 \u0111\u1ed1i t\u00e1c r\u1ed9ng kh\u1eafp trong khu v\u1ef1c Ch\u00e2u \u00c1 Th\u00e1i B\u00ecnh D\u01b0\u01a1ng, ch\u00fang t\u00f4i hi\u1ec3u r\u00f5 h\u01a1n v\u1ec1 th\u1ecb tr\u01b0\u1eddng v\u00e0 t\u1eeb \u0111\u00f3 mang \u0111\u1ebfn nh\u1eefng gi\u1ea3i ph\u00e1p b\u1ea3n \u0111\u1ecba h\u00f3a ph\u00f9 h\u1ee3p v\u1edbi t\u1eebng qu\u1ed1c gia, t\u1eebng t\u1ed5 ch\u1ee9c.<\/p>\n
<\/p>\n
C\u00e1ch ch\u00fang t\u00f4i c\u00f3 th\u1ec3 gi\u00fap b\u1ea1n<\/strong><\/p>\nN\u1ebfu b\u1ea1n mu\u1ed1n bi\u1ebft th\u00eam v\u1ec1 syslog-ng, b\u1ea1n \u0111ang \u1edf \u0111\u00fang n\u01a1i, ch\u00fang t\u00f4i s\u1eb5n s\u00e0ng gi\u00fap \u0111\u1ee1! DTA l\u00e0 nh\u00e0 ph\u00e2n ph\u1ed1i c\u1ee7a One Identity, \u0111\u1eb7c bi\u1ec7t t\u1ea1i Vi\u1ec7t Nam v\u00e0 ch\u00e2u \u00c1, c\u00e1c k\u1ef9 thu\u1eadt vi\u00ean c\u1ee7a ch\u00fang t\u00f4i c\u00f3 kinh nghi\u1ec7m s\u00e2u r\u1ed9ng v\u1ec1 s\u1ea3n ph\u1ea9m v\u00e0 c\u00e1c c\u00f4ng ngh\u1ec7 li\u00ean quan m\u00e0 b\u1ea1n lu\u00f4n c\u00f3 th\u1ec3 tin t\u01b0\u1edfng. Ch\u00fang t\u00f4i cung c\u1ea5p c\u00e1c gi\u1ea3i ph\u00e1p tr\u1ecdn g\u00f3i cho s\u1ea3n ph\u1ea9m n\u00e0y, bao g\u1ed3m t\u01b0 v\u1ea5n, tri\u1ec3n khai v\u00e0 d\u1ecbch v\u1ee5 b\u1ea3o tr\u00ec.<\/p>\n
Nh\u1ea5n v\u00e0o \u0111\u00e2y \u0111\u1ec3 bi\u1ebft th\u00eam th\u00f4ng tin chi ti\u1ebft: https:\/\/dtasiagroup.com\/one-identity\/?lang=vi\u00a0<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"“Logging” \u0111\u00e3 ph\u00e1t tri\u1ec3n \u0111\u00e1ng k\u1ec3 t\u1eeb nh\u1eefng ng\u00e0y s\u1eed d\u1ee5ng syslog truy\u1ec1n th\u1ed1ng. M\u1eb7c d\u00f9 v\u1eady, nhi\u1ec1u ng\u01b0\u1eddi d\u00f9ng syslog-ng v\u1eabn ti\u1ebfp t\u1ee5c d\u1ef1a v\u00e0o c\u00e1c giao th\u1ee9c syslog \u0111\u1ec3 v\u1eadn chuy\u1ec3n log v\u00e0 l\u01b0u tr\u1eef ch\u00fang d\u01b0\u1edbi d\u1ea1ng t\u1ec7p ph\u1eb3ng. Trong khi h\u1ea7u h\u1ebft c\u00e1c h\u1ec7 th\u1ed1ng SIEM v\u00e0 c\u00f4ng c\u1ee5 ph\u00e2n log c\u00f3 th\u1ec3 nh\u1eadn tin nh\u1eafn syslog ho\u1eb7c \u0111\u1ecdc ch\u00fang b\u1eb1ng c\u00e1c agent c\u1ee7a m\u00ecnh, b\u1ea1n c\u00f3 th\u1ec3 th\u01b0\u1eddng xuy\u00ean t\u1eadn d\u1ee5ng \u0111\u00edch http() c\u1ee7a syslog-ng \u0111\u1ec3 g\u1eedi nh\u1eadt k\u00fd. Ph\u01b0\u01a1ng ph\u00e1p n\u00e0y cung c\u1ea5p hi\u1ec7u su\u1ea5t cao v\u00e0 m\u1ed9t ki\u1ebfn tr\u00fac \u0111\u01a1n gi\u1ea3n h\u01a1n \u0111\u1ec3 duy tr\u00ec.<\/p>\n","protected":false},"author":11,"featured_media":13274,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[79,66,63,62],"tags":[],"class_list":["post-14048","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bai-viet","category-news-vi","category-announcements-vi","category-uncategorized-vi"],"_links":{"self":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts\/14048","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/comments?post=14048"}],"version-history":[{"count":0,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts\/14048\/revisions"}],"wp:attachment":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/media?parent=14048"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/categories?post=14048"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/tags?post=14048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"Why](\"https:\/\/www.syslog-ng.com\/community\/cfs-filesystemfile\/__key\/communityserver-components-secureimagefileviewer\/communityserver-blogs-components-weblogfiles-00-00-00-00-05\/DefaultBlogImg_5F00_RS_5F00_syslog_2D00_ng.jpg_2D00_512x256x2.jpg?_=637343010596613338\")
<\/p>\n