-1
votes
1answer
19 views

Alerting on threshold crossing?

We are using logstash + elasticsearch + Kibana to parse, store and view our logs respectively. Now, we want a notification/alert when a threshold for a particular log or threshold for a particular ...
0
votes
2answers
47 views

making sure that iptables is running

Is there a tool for monitoring that iptables (or shorewall or similar) is up and running with a core set of important rules? I need something which alerts me either if the firewall goes donw ...
2
votes
1answer
139 views

Remote disk monitoring with WMI without admin rights

I am setting up a restricted WMI group that should be able to read WMI information from my remote hosts. I have the group set up as member of the remote DCOM and performance monitor groups. I also ...
1
vote
3answers
180 views

Apache httpd server 'is it possible': Alert on specific condition in access/error log

I'm just wondering is it there some module which can detect certain event in access/error log and if it matches it, to send an email with information. example: I want to detect when someone makes ...
5
votes
4answers
126 views

Monitor someone on server

Im in the unfortunate position of having to give someone who I do not fully trust privileged access to a webserver to finish work that they never completed. They will access the server remotely (ie I ...
3
votes
1answer
60 views

What is the best way to determine server resources each remote user is using

I manage some Win2008R2 servers on the network for my department. Each server usually has 10 - 20 users at a time connected to it. They are nothing more than locked down file servers on the domain. ...
1
vote
2answers
266 views

What are the important log files to monitor for security purposes on a web server?

I have looked at many logs and it seems that some of them are more relevant for monitoring purposes against hackers. The ones I found are: -auth.log -mail.log: if i'm running a mail server, will this ...
0
votes
1answer
321 views

What is wrong with my Watcher (incron-like) daemon?

I have installed Watcher this way: both watcher.py and watcher.ini are located in /etc I also installed pyinotify and it does work when I use python -m pyinotify -v /var/www However, I want to use ...
0
votes
1answer
173 views

Is there a ready-made inotify program to monitor changes on a directory?

I am trying to understand how inotify works and it seems that you need to program stuff in C for it to work. Since I don't know C, I was wondering if there is a program or script already made to ...
-1
votes
1answer
196 views

what are the must have applications for an intermediate devop? [closed]

Over the past year my responsibilities have grown from managing 5 servers to 20+. Most all of these are either on EC2 or Linode and they all serve different purposes. Some are on CentOS and others on ...
5
votes
1answer
158 views

Exchange security monitoring tools

I am trying to identify tools that can perform security monitoring of Exchange. Ideally, the tools should be able to pick up things like: permission changes for high risk mailboxes multiple ...
0
votes
1answer
365 views

How can I monitor the network on ESXi node for connections and find the source of a ddos attack

I'm looking for something fairly simple to install, that will monitor network traffic on the vswitch for my esxi node as we're getting ddosed and I need to be able to easily see where the traffic is ...
1
vote
2answers
765 views

SNMP vs WMI security

Windows 2008 and 2003 servers. Would like to monitor server health remotely over internet. The monitoring computer may change IP(non-static IP). Trying to decide SNMP or WMI. SNMP seems to only allow ...
1
vote
3answers
167 views

best practices method to protecting information leak in enterprise environment [closed]

we are starting to do a security sweep of information and how users use company information or access to company information in an effort to see if there are any possible holes in how a company ...
0
votes
1answer
296 views

outgoing DNS flood targeted to non-ISP hosts

Below is the specific traffic monitored at the network perimeter and originating from a user PC on Vista platform. My question is not about the effects of the flood, but about the nature of the ...
2
votes
4answers
314 views

What are the “must ” security tools for small organizations?

One of my friend has started a company, it's a small-scale company that has a 40 workers.There is two guys also responsible for the security and IT related issues.He is managing the LAN, Webpage of ...
5
votes
6answers
4k views

Monitor the shell activity of a user on your Unix system?

Trust, but verify. Let's say I want to hire someone a sysadmin, and give them root access to my Unix system. I want to disable X windows for them, only allow shell usage (through SSH, maybe), so that ...
1
vote
1answer
940 views

How do you avoid/detect DNS hijacking? (aka latest twitter hack)

It is all over the news today that Twitter was hacked by a DNS redirection/hijacking. My question is, what tools or techniques do you guys use to monitor your DNS/whois and detect this kind of ...
1
vote
5answers
199 views

Network Monitoring and Filtering [closed]

As the IT administrator for my company I have been tasked with deciding what traffic to filter, shape, and othewise monitor on our network. What protocols, applications, and other network traffic do ...
0
votes
3answers
110 views

Monitor communication to outside the network

I work at a place where they have access to very sensitive data and think a lot about security. I dont want to ask bc they may lie, is there software to monitor data such as email (pop/imap AND ...
-1
votes
5answers
138 views

System Access Monitoring Software [closed]

Are there any programs that you would recommend that monitor access to your computer from the network? Windows XP Professional My "monitor" I mean log system access from he network. What folders and ...
2
votes
5answers
402 views

Positive vs. negative monitoring

Ive been looking at monitoring for a while. My org didnt have any before i came other than 'whered my yahoo go'. It appears that most packages out there focus on negative monitoring (ie, this ...
0
votes
1answer
414 views

Safely Grant Access to SQL 2005 Replication Monitor to Create Snapshots

0 vote down star I have a database that I'm publishing to a remote site using Snapshot replication (only method that will work given the application and database schema). Because the replica ...
16
votes
7answers
12k views

Monitor an incoming SSH session in real time

Is there any linux software to monitor an incoming ssh session. At a previous job I was told that if you ever needed support from Red Hat for example you could have them SSH into your machine and you ...
0
votes
2answers
258 views

Secure way to monitor and restart services that require password

Sometimes when the power goes out and the UPS dies before it goes back on, some services on our servers don't come back up. Namely some VMware virtual machines. I was thinking of setting up a ...