TAILIEUCHUNG - apress_automating_linux_and_unix_system_administration0b 7

252 C HAPTER 8 D EP L OYING YOU R FIR S T A P P L IC A TION security, as well as differences in how much time they’re willing to spend investigating new file-distribution methods. System administrators end up becoming very adept at copying files from many different sources to many different destinations. If you’re at or near the beginning of your SA career, study the options and tools in this chapter on your own and learn them well. The time will be well spent. At this stage in the construction of our example infrastructure, it might seem like we’re. | 252 CHAPTER 8 DEPLOYING YOUR FIRST APPLICATION security as well as differences in how much time they re willing to spend investigating new file-distribution methods. System administrators end up becoming very adept at copying files from many different sources to many different destinations. If you re at or near the beginning of your SA career study the options and tools in this chapter on your own and learn them well. The time will be well spent. At this stage in the construction of our example infrastructure it might seem like we re almost finished. After all we had the required infrastructure to deploy our first application right Well yes we have a functional infrastructure but it s still in its early stages. We re lacking in several key areas and we ll address some of our basic reporting needs in the next chapter. CHAPTER 9 Generating Reports and Analyzing Logs You need to know about errors on the systems in your environment before they turn into major problems. You also need the ability to see the actions your automation system is performing. This means you ll need two types of reporting Log reports that capture bad strings report them immediately and ignore the rest Log reports that ignore okay strings and report on what s left You want to know right away if a system has serious hardware issues or major application issues. We re going to run a reporting system that looks for unwanted words or phrases. Here is one such unwanted message using specific query-source port suppresses port randomization and can be insecure This particular message means that you re running a version of BIND that works around a serious vulnerability but that a configuration directive overrides the workaround. If this were going on in your network you d want to know as soon as possible. We ll use real-time alerting to pick up on this condition as well as others. Reporting on cfengine Status You have two main ways of tracking the actions and changes that cfengine makes across your .

• Hệ điều hành