keylime / enhancements

Keylime Enhancement Proposal
Apache License 2.0
1 stars 21 forks source link

Enhanced Event Logging #62

Open mpeters opened 2 years ago

mpeters commented 2 years ago

Enhancement Description

Improve Keylime's logging capabilities by sending structured events to a 3rd party logging tool (like ElasticSearch) to enable better observability and searchability of past events (such as new agent registration, attestation failures, etc).

THS-on commented 2 years ago

A good starting point is to look at the current attestation failure tagging system. This already collects attestation failures, but only failures with the highest severity are reported to outside systems and not all failure messages are optimized to be machine readable.