So here is my plan for a global cloud arch (systems very volitile) - "Local" install - Alert via Syslog to central server on dedicated "facility" - Local Syslog go to central server - Central console (Graylog2?) parsing all syslog for custom correlation
Should scale to 10's of thousands. We'll see. Phil -- Director of Security and Compliance RightScale Inc - http://www.rightscale.com 805-243-0942 Skype: phil.cox.rs Twitter: @sec_prof
