Application self-service for assured log management in cloud environments

摘要

A log management service provides automated log management for any applications deployed on a cloud. A security profile defining the logging requirements for the application is associated with the application. During deployment, a deployment appliance queries the service, providing an application context and deployment topology. The log management service references the supplied application context and deployment topology against the defined log requirements in the security profile and, in response, determines an applicable set of log files, residency and longevity requirements. The log management service then identifies/specifies the log collection resources and requirements that are necessary and instructs the requesting deployment process to configure the one or more log sources and event collectors as needed. As log data is generated by the log sources, logs are sent to a specified log management service provider for the deployed application, and the log management service provider handles particular audit requirements.

主权项

1. A method for automated log management in a cloud environment, comprising:
associating a security profile with an application being deployed on the cloud, the security profile comprising one or more logging requirements; in association with deployment of the application in the cloud environment, receiving a query requesting configuration of a set of log resources in the cloud environment to support the one or more logging requirements for the application being deployed, the query having associated therewith an application context and deployment topology; responsive to the query, and based on the security profile, the application context and the deployment topology, determining an applicable set of log files, residency and longevity requirements for the application, and identifying the set of log resources necessary to provide log collection to meet the applicable set as determined; and as the application is deployed in the cloud environment, providing configuration information to the cloud environment to enable configuration of the identified set of log resources.