Operations | Monitoring | ITSM | DevOps | Cloud

While the Capital One breach may have been jaw-dropping in its sheer scale, there are best practice lessons to be learned in its remediation response, says Nick Carstensen, technical product evangelist at Graylog.

With almost all deployed software systems consisting of multiple moving parts, it’s hard to find arguments against centralized aggregation of log entries. Deployment technologies like lightweight virtualization, Kubernetes, and serverless computing tend to spread out the components of a system across a large number of runtime primitives. Gaining visibility into the state and history of such systems is as important as ever but can also be more difficult than ever.

We are excited to announce that Elastic will offer free, monitored Elastic Endpoint Security to the 2020 US presidential and congressional campaigns in partnership with Defending Digital Campaigns. Defending Digital Campaigns (DDC) is a non-partisan organization that provides low- and no-cost security products and services to federal campaigns to help defend them from cyberattacks and election interference.

Our Data-to-Everything vision is to bring data to every question, decision and action—blockchain data is no exception. Part of making that vision a reality is getting data into Splunk where you can start to investigate, monitor, analyze and act in order to turn data into doing.

It is imperative for organizations to monitor performance, security and stability of their blockchain integrations. Splunk makes it easy to achieve this observability, not just with blockchain but with all enterprise infrastructure. Our customers have told us this is simply a necessity for getting to production and also makes application development faster. Based on Ethereum, Quorum is an open source blockchain platform built for business and backed by strong partnerships such as J.P.

Logs. You have them. You need to keep track of them. The process of log monitoring can be tedious. Typically it’s one of those things we take for granted and only look at when it stops working. So, how do you deal with them? In this post, we’re going to talk about why and how to monitor logs. Toward the end, we’ll discuss a few tools that’ll help, mostly to avoid manual labor.

Microservices constantly change in containerized environs, making pod or node identification and their logging more of a challenge. Autodiscover simplifies monitoring movements in these sorts of environments—places like Kubernetes and Docker. Autodiscover allows you to track pods and adapt settings as changes happen in your environment.

We highly recommend that all App Search users keep their deployments up to date with the latest available version to have access to new features, security updates, and performance improvements. This guide is designed to help customers through the upgrade process, to minimize the impact of an upgrade on production environments, and to ensure data safety during an upgrade. Finally, the guide helps App Search users troubleshoot any issues that may occur during an upgrade.

We are excited to announce the general availability of version 7.6 of the Elastic Stack. This release streamlines automated threat detection with the launch of a new SIEM detection engine and a curated set of detection rules aligned to the MITRE ATT&CK™ knowledge base, brings performance improvements to Elasticsearch, makes supervised machine learning more turnkey with inference-on-ingest features, and deepens cloud observability and security with the launch of new data integrations.