Knowledge Capture

From Laen

Keep track of past odd behavior on your systems. This helps you to not repeat past mistakes, and to better understand system interactions.

Anything out of the ordinary gets logged and converted to a metric.

• Anytime someone becomes privileged on any server (sudo, remote root logins, etc)
• Application restarts

The definition of "ordinary" becomes important.