[Keylime] Enhanced Event Logging #612
Locked
nate-double-u
started this conversation in
Google Summer of Code 2022
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Keylime enables users to monitor remote nodes (file integrity and measured boot) using a hardware based cryptographic root of trust. Various keylime components currently log events and information in a text log on the machine where the process is running. Not only does this make it challenging in a distributed environment, but it is also difficult to parse through the unstructured data looking for specific historical events. We would like to create structured events for every state change in keylime (new agent registered, agent passes attestation, agent fails attestation, etc) and send those to a 3rd party system like ElasticSearch. This will allow creating more detailed dashboards as well as historical event logs for forensic analysis.
Mentor(s): Michael Peters (@mpeters)
https://github.com/cncf/mentoring/blob/main/summerofcode/2022.md#enhanced-event-logging
Beta Was this translation helpful? Give feedback.
All reactions