Log analysis

Deborah Mahima — Thu, 15 Sep 2022 06:19:00 +0000

1.Write down top 10 events in Windows and identify their event ID ?
104 Event Log was Cleared
4719 System audit policy was changed
4624 Successful account log on
4634 An account logged off
4722 A user account was enabled
4648 A logon attempt was made with explicit credentials
4719 System audit policy was changed.
4720 A user account was created

2.Write down top 10 events in Linux and identify their pattern and log linux ?
var/log/boot.log
/var/log/auth.log
/var/log/faillog
/var/log/yum.log
var/log/httpd/
/var/log/mail.log
/var/log/boot.log

3.Identify the log file in linux which log service
start|stop|enable|disable ?
systemctl start service
systemctl stop service
systemctl enable service
systemctl disable service

4.Identify the log file in linux which log process running or killed ?
Check in /var/log/kern.log

5.Identify the log file of apache and find out list of VERB and count of each using linux command?
Location of the Log Files By default on Debian-based distributions such as Ubuntu, access and error logs are located in the /var/log/apache2 directory.
On CentOS the log files are placed in /var/log/httpd directory.Reading and Understanding the Apache Log Files

Understanding Datadog agent

Deborah Mahima — Tue, 13 Sep 2022 09:58:00 +0000

What is Datadog agent?
The Datadog Agent is software that runs on your hosts.
It collects events and metrics from hosts and sends them to Datadog, where you can analyze your monitoring and performance data.
Type of Datadog Agent?
StatsD
DogstatsD
Ports used to in Datadog agent?
443/tcp, 123/udp
Top 5 commands with simple explanation troubleshooting Datadog agent?

$ systemctl start datadog-agent
$ systemctl stop datadog-agent
$ systemctl restart datadog-agent
$ systemctl status datadog-agent`

Locate how to enable Logs monitoring in datadog.yaml
Edit the datadog-values.yaml file and locate.
5 techniques for troubleshooting Datadog?
1] check the API token
2] check the site
3] check if agent is running or not

Debug School: Deborah Mahima

Log analysis

Understanding Datadog agent