In MinSec for Applications, for Medium Risk, the Centralized Logging item has the following:
Forward logs to a remote log server. University IT Splunk service recommended.
For Globus Connect Personal, it is an application running on an endpoint. There's no precedent/policy (that I'm aware of) for collecting logs from an endpoint, so I don't think this applies here.
For Globus Connect Server, there is GridFTP and MyProxy. GridFTP logs to /var/log/gridftp.log, and MyProxy logs to syslog. So, the install docs can be updated to say that GridFTP logs should be shipped off of the server.
In MinSec for Applications, for Medium Risk, the Centralized Logging item has the following:
Forward logs to a remote log server. University IT Splunk service recommended.For Globus Connect Personal, it is an application running on an endpoint. There's no precedent/policy (that I'm aware of) for collecting logs from an endpoint, so I don't think this applies here.
For Globus Connect Server, there is GridFTP and MyProxy. GridFTP logs to
/var/log/gridftp.log, and MyProxy logs to syslog. So, the install docs can be updated to say that GridFTP logs should be shipped off of the server.