summaryrefslogtreecommitdiff
path: root/genesishosting/security/logging-monitoring.md
blob: c305627950bf6e2c0bd5265debf67ea2a0cf08b8 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
# Logging & Monitoring Policy

We collect and monitor system activity to detect threats, enforce accountability, and assist in incident resolution.

## Log Types

- SSH login attempts
- WHMCS access logs
- AzuraCast and TeamTalk server logs
- PostgreSQL query and connection logs
- Fail2Ban logs (ban/unban events)

## Monitoring Tools

- Prometheus for metrics
- Grafana dashboards for visual alerts
- Genesis Shield (Telegram + Mastodon alerting)
- Manual log review every 7 days

## Retention

- General logs: 30 days
- Security-related logs: 90 days minimum
- Logs archived to encrypted ZFS volume