Company
Date Published
Author
Jacob Martinson
Word count
2912
Language
English
Hacker News points
None

Summary

This solution provides a centralized network log storage, durable long-term archiving, and alert notifications for critical Vault events. It uses syslog-ng to forward logs from Vault nodes to a central log server, which buffers the audit logs locally before forwarding them to a remote log server. The remote log server is configured to send alerts to Slack when certain conditions are met in the audit or server logs. The solution also includes a log rotation mechanism and can be deployed using Terraform code. It costs only a few dollars a month in AWS compute charges for small installations, making it an affordable option for teams without access to a highly available logging and alerting system.