Question

Based on your professional and/or educational experience, how often do you believe system log files should be checked? How vigilant are you regarding regular checks of these files? When discussing, please also outline some of the reasons why an administrator might tend to ignore these files.

Answer 1

How often system log files should be checked is totally depend on "what exactly you are interested in finding out", or "what you look over into the log file".

Below there are some situation where system log files should be analyzed:-

1. Developement : During the development of software you need to check your log files carefully to find out the bug creating while creating the software, you need to check your file on a daily basis.
2. Operation : During the management of a live system or event, you need to constantly look up into the system log file to avoid any suspicious activity that may happen at that time.
3. Security analysis : For reviewing the system you need to check system records at a particular frequency based upon your compliance.

Administrators might tends to ignore these files because the administrator works to give support to either a team or an individual which needs focus and concentration to do this work, looking up to the system can be mind diverted.