Open mpeters opened 2 years ago
A good starting point is to look at the current attestation failure tagging system. This already collects attestation failures, but only failures with the highest severity are reported to outside systems and not all failure messages are optimized to be machine readable.
Enhancement Description
Improve Keylime's logging capabilities by sending structured events to a 3rd party logging tool (like ElasticSearch) to enable better observability and searchability of past events (such as new agent registration, attestation failures, etc).