Comment

Just fyi, as a sysadmin, I never want logs tampered with. I import them filter them and the important parts will be analysed no matter how much filller debugging and info level stuff is there.

Same with network captures. Modified pcaps are worse than garbage.

Just include everything.

Sorry you had a bad experience. The customer service side is kind of unrelated to the technical practice side though.

source

Sort:hotnew top

CeeBee@lemmy.world ⁨1⁩ ⁨year⁩ ago
Ya, it’s a good point. I’ve actually never had to deal with a client/customer providing logs before. Aside from one system that I built which would collect everything in the backend and provided a tidy zip file to be emailed. I’m used to getting the logs myself and was trying to be helpful without thinking about that.

source
Eccitaze@yiffit.net ⁨1⁩ ⁨year⁩ ago
Yeah, as someone in a tech job whose primary function is “parsing and interpreting logs” sometimes even the repeated flood of seemingly useless logs can be helpful. If nothing else, they explain why there aren’t any useful logs and that can guide how I respond to the problem.

source
deweydecibel@lemmy.world ⁨1⁩ ⁨year⁩ ago
I can’t remember exactly what it was (Emby?) but I distinctly remember one time having my ticket closed because they scoured the log and found mention of a torrented file. No sure how common that is though.

source
- Snowplow8861@lemmus.org ⁨1⁩ ⁨year⁩ ago
  It’s totally fine to bulk replace some sensitive things like specifically sensitive information with “replace all” as long as it doesn’t break parsing which happens with inconsistency. Like if you have a server named "Lewis-Hamiltons-Dns-sequence“ maybe bulk rename that so is still clear “customer-1112221-appdata”.
  
  But try to differentiate ‘am I ashamed’ or ‘this is sensitive and leaking it would cause either a PII exfiltration risk or security risk’ since only one of these is legitimate.
  
  Note, if I can find that information with dns lookup, and dns scraping, that’s not sensitive. If you’re my customer and you’re hiding your name, that I already invoice, that’s probably only making me suspicious if those logs are even yours.
  
  source