3 ms·
I don't understand the point of this post. OK, and then? Same for the post it links to: https://utcc.utoronto.ca/~cks/space/blog/sysadmin/AlertsNeverComprehe
by Terretta 3y ago
I don't understand the point of this post. OK, and then?
Same for the post it links to:
https://utcc.utoronto.ca/~cks/space/blog/sysadmin/AlertsNeverComprehensive https://utcc.utoronto.ca/~cks/space/blog/sysadmin/AlertsNeve...
Again, OK, and then?
More succinctly than these two posts, the generalized problem is how to have a computer do something useful when encountering a state it hasn't seen before.
After reformulating the objection this way, a number of paths open up.
- xg15 3y agoYeah. He describes log monitoring as harder than it actually is, but even if he were completely right, what are you supposed to do instead? The problem you're trying to solve is still there, so what would be the better way to approach it than scanning the logs?
- deleted 3y ago[deleted]