syslog-ng Premium Edition Implementation
-
说明
Attend this three-day syslog-ng Premium Edition (PE) Implementation training course to build the knowledge and skills needed to successfully install, configure, operate and troubleshoot One Identity syslog-ng PE. Plus, as part of the course, you can safely hone your syslog-ng PE skills in simulated environments to your increase your hands-on experience before taking on a live implementation.
Please note that this training is part of the syslog-ng Log Management Foundation Training course. For technology professionals looking to build your knowledge for both syslog-ng Premium Edition (PE) and syslog-ng Store Box (SSB), you can take the syslog-ng Log Manage Foundation Training course to learn about both in a single 4-day training.
For One Identity partners, you must be certified (pass exams) to deploy solutions.
-
目标受众
• Partners seeking to deploy syslog-ng Premium Edition • Architects and consultants who will plan, install and configure syslog-ng Premium Edition -
目标
- Overview of the feature-set of syslog-ng Premium Edition
- Introduction to syslog protocols (RFC3164, RFC5424 and Eventlog)
- Installation and basic settings of syslog-ng PE
- Using Macros and Templates to reformat syslog messages
- Setup filters
- Manage syslog-ng daemon from the command line
- Transferring messages via the network and securing them
- Collect messages from windows machines
- Storing messages in logstores and encrypt them.
- Parsing messages by message parser modules and reformat them by rewrite modules
- Store messages in SQL databases
- Classify messages with the radix tree algorithm based patterndb
- Advanced setting and syslog-ng internals
- Troubleshooting syslog-ng PE
-
主题
Introduction syslog-ng PE
- Features
- History of syslog-ng PE
- Protocol Overview
Simple Settings
- Install syslog-ng PE
- Configuration and Licensing
- Sources and source drivers
- Destinations and destination drivers
- The logpath
- Global options
Macros and Templates
- What is message parsing
- What are macros
- What are templates and how to use them
Filters
- Define filters
- Filter modules
- Usage in the logpath
- Flags of the logpath
Command Line Tools
- Command line tools to manage syslog-ng
Networking
- Transfer messages via the network
- Securing the transport
- Increase reliability
Windows Messaging
- Using syslog-ng Agent for windows for message forwarding
- Collecting event logs by Windows WEC
Logstore
- Configuring and displaying logstore files
- Encrypt and decrypt logstores
Message Parsing
- Separate message parts by parser modules
Database support
- Sending messages to SQL databases
Message Content Manipulation
- Rewriting messages and message parts
Message Classification
- Separate and classify messages by patterndb
Advanced Settings
- Syslog-ng Internals
- Message flow and limits
- Disk buffering
- Monitoring syslog-ng
- Configuration tips and tricks
Troubleshooting syslog-ng PE
- Troubleshooting syslog-ng settings
- Troubleshooting syslog-ng Agent for Windows
-
格式
This course is only offered as private instructor-led training delivered at a customer-chosen site for up to 8 attendees.
-
特别说明
Agenda, labs and demos show all available parts for an existing training module. Depending on the course, smaller parts of it might not be taught or performed. Typically, suitable labs must be taught but demos could be selected during a training.
