{"id":799,"date":"2024-03-01T00:00:00","date_gmt":"2024-02-29T21:00:00","guid":{"rendered":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/?p=799"},"modified":"2026-10-06T02:41:35","modified_gmt":"2026-10-05T23:41:35","slug":"vmware-log-insight-nedir","status":"publish","type":"post","link":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/guvenlik\/vmware-log-insight-nedir\/","title":{"rendered":"VMWare Log Insight Nedir?"},"content":{"rendered":"
\n

Merkezi g\u00fcnl\u00fck analizi, VMware Log Insight ortam\u0131n\u0131 de\u011ferlendiren ekiplerin sistem ve uygulama kay\u0131tlar\u0131n\u0131 ortak bir arama ve inceleme s\u00fcrecinde ele almas\u0131n\u0131 sa\u011flar. Farkl\u0131 bile\u015fenlerdeki olaylar zaman ve ba\u011flam \u00fczerinden kar\u015f\u0131la\u015ft\u0131r\u0131labilir. Ancak veri toplanmas\u0131, olay\u0131n do\u011fru yorumland\u0131\u011f\u0131n\u0131 veya b\u00fct\u00fcn kaynaklar\u0131n kapsand\u0131\u011f\u0131n\u0131 kendili\u011finden g\u00f6stermez.<\/p>\n

\"Kaynak
\u0130letim, ayr\u0131\u015ft\u0131rma ve ara\u015ft\u0131rma ayr\u0131 kontrol noktalar\u0131d\u0131r.
G\u00f6rseli b\u00fcy\u00fct \u2192<\/a><\/figcaption><\/figure>\n

Merkezi g\u00fcnl\u00fck neden gereklidir?<\/h2>\n

Bir uygulama hatas\u0131 web sunucusu, kimlik servisi ve veritaban\u0131nda farkl\u0131 izler b\u0131rakabilir. Bu kay\u0131tlar\u0131 ortak zaman aral\u0131\u011f\u0131nda incelemek olay\u0131n ak\u0131\u015f\u0131n\u0131 anlamaya yard\u0131mc\u0131 olur. \u00d6zellikle k\u0131sa \u00f6m\u00fcrl\u00fc sanal makinelerde g\u00fcnl\u00fcklerin yaln\u0131z yerel diskte tutulmas\u0131 inceleme s\u0131ras\u0131nda veri kayb\u0131na yol a\u00e7abilir.<\/p>\n

Merkezile\u015ftirme her sorunu \u00e7\u00f6zmez. Uygulama gerekli olay\u0131 hi\u00e7 \u00fcretmiyorsa veya saatler uyumsuzsa arama sonucu yan\u0131lt\u0131c\u0131 olabilir. G\u00fcnl\u00fcklerin hangi kaynaktan, hangi zaman dilimiyle ve hangi kay\u0131plarla geldi\u011fini bilmek, yaln\u0131z depolanan veri miktar\u0131ndan daha \u00f6nemlidir.<\/p>\n

S\u00fcr\u00fcm ve toplama kapsam\u0131<\/h2>\n

Belge se\u00e7meden \u00f6nce y\u00f6netim aray\u00fcz\u00fcnden \u00fcr\u00fcn ad\u0131n\u0131, kurulu s\u00fcr\u00fcm\u00fc ve da\u011f\u0131t\u0131m modelini do\u011frulay\u0131n. Kaynaklardaki Aria Operations for Logs 8.18 ve VCF 9.1 belgeleri kendi s\u00fcr\u00fcmlerini anlat\u0131r; her eski ortam i\u00e7in ayn\u0131 i\u015flem ad\u0131mlar\u0131n\u0131 sunmaz. Desteklenen ajan, protokol, i\u00e7erik paketi ve entegrasyonlar\u0131 kurulumunuza ait belge ve lisans ko\u015fullar\u0131yla kar\u015f\u0131la\u015ft\u0131r\u0131n.<\/p>\n

Bir kayna\u011f\u0131n ba\u011fland\u0131\u011f\u0131n\u0131 g\u00f6rmek t\u00fcm olaylar\u0131n al\u0131nd\u0131\u011f\u0131n\u0131 g\u00f6stermez. Filtreler, tampon s\u0131n\u0131rlar\u0131, a\u011f kesintisi ve ayr\u0131\u015ft\u0131rma hatalar\u0131 veri kapsam\u0131n\u0131 etkileyebilir. Kaynakta \u00fcretilen kontroll\u00fc bir test olay\u0131n\u0131n merkezde do\u011fru alanlarla g\u00f6r\u00fcnd\u00fc\u011f\u00fcn\u00fc do\u011frulay\u0131n. Bu testte parola veya ki\u015fisel veri kullanmay\u0131n.<\/p>\n

Yap\u0131land\u0131r\u0131lm\u0131\u015f alanlar ve zaman<\/h2>\n

Zaman damgas\u0131, kaynak ad\u0131, \u00f6nem derecesi ve istek kimli\u011fi gibi alanlar ara\u015ft\u0131rmay\u0131 h\u0131zland\u0131r\u0131r. Uygulaman\u0131n ayn\u0131 i\u015flemi farkl\u0131 servislerde ili\u015fkilendirebilmesi i\u00e7in ortak bir ba\u011flam \u00fcretmesi yararl\u0131d\u0131r. Ham metin i\u00e7inde benzer kelimelerin bulunmas\u0131, olaylar\u0131n ayn\u0131 iste\u011fe ait oldu\u011funu kan\u0131tlamaz.<\/p>\n

Saat e\u015fitleme ve zaman dilimi d\u00f6n\u00fc\u015f\u00fcm\u00fcn\u00fc kontrol edin. Birden fazla sistemin ayn\u0131 saniyede g\u00f6r\u00fcnen olaylar\u0131 ger\u00e7ekte farkl\u0131 s\u0131rada ger\u00e7ekle\u015fmi\u015f olabilir. Ayr\u0131\u015ft\u0131rma kural\u0131 de\u011fi\u015fti\u011finde ge\u00e7mi\u015f ve yeni kay\u0131tlar\u0131n ayn\u0131 sorguyla kar\u015f\u0131la\u015ft\u0131r\u0131labilir olup olmad\u0131\u011f\u0131n\u0131 inceleyin. Alan adlar\u0131n\u0131n sessizce de\u011fi\u015fmesi alarmlar\u0131 etkileyebilir.<\/p>\n

Alarm ve olay incelemesi<\/h2>\n
    \n
  1. Alarm\u0131n hangi i\u015f veya g\u00fcvenlik riskini g\u00f6sterece\u011fini tan\u0131mlay\u0131n.<\/li>\n
  2. Tek olay ile tekrar eden \u00f6r\u00fcnt\u00fcn\u00fcn farkl\u0131 anlamlar\u0131n\u0131 de\u011ferlendirin.<\/li>\n
  3. Bak\u0131m ve da\u011f\u0131t\u0131m d\u00f6nemlerinin beklenen kay\u0131tlar\u0131n\u0131 hesaba kat\u0131n.<\/li>\n
  4. Uyar\u0131n\u0131n sahibini, inceleme ad\u0131mlar\u0131n\u0131 ve y\u00fckseltme ko\u015fulunu yaz\u0131n.<\/li>\n
  5. Yanl\u0131\u015f pozitifleri ve ka\u00e7\u0131r\u0131lan olaylar\u0131 geri bildirim olarak kullan\u0131n.<\/li>\n<\/ol>\n

    Merkezi g\u00fcnl\u00fck platformu tek ba\u015f\u0131na tam bir g\u00fcvenlik operasyonu veya otomatik olay \u00e7\u00f6z\u00fcm\u00fc de\u011fildir. Hesap hareketi, uygulama davran\u0131\u015f\u0131 ve altyap\u0131 metri\u011fi birlikte incelenebilir. Eri\u015fim iptali ya da izolasyon gibi m\u00fcdahaleler i\u00e7in yetkili karar ve kay\u0131t s\u00fcreci gerekir.<\/p>\n

    Saklama, kapasite ve gizlilik<\/h2>\n

    G\u00fcnl\u00fck hacmi uygulama s\u00fcr\u00fcm\u00fc, hata s\u0131kl\u0131\u011f\u0131 ve ayr\u0131nt\u0131 seviyesiyle de\u011fi\u015fir. Saklama s\u00fcresini i\u015f, mevzuat ve g\u00fcvenlik ihtiyac\u0131na g\u00f6re belirleyin; sonsuz saklamay\u0131 varsay\u0131lan hedef yapmay\u0131n. Ar\u015fiv, yedek ve aranabilir veri farkl\u0131 eri\u015fim ve maliyet ko\u015fullar\u0131na sahip olabilir.<\/p>\n

    Parola, eri\u015fim belirteci veya gereksiz ki\u015fisel verinin g\u00fcnl\u00fc\u011fe yaz\u0131lmas\u0131n\u0131 kayna\u011f\u0131nda azalt\u0131n. Merkezi depoda rol ve eri\u015fim s\u0131n\u0131r\u0131 uygulay\u0131n. Bir olay ara\u015ft\u0131r\u0131l\u0131rken kay\u0131tlar\u0131n d\u0131\u015far\u0131 aktar\u0131lmas\u0131 da veri payla\u015f\u0131m\u0131d\u0131r; gerekli k\u0131sm\u0131, yetkili ki\u015filerle ve uygun saklama ko\u015fuluyla payla\u015f\u0131n. \u0130nceleme kolayl\u0131\u011f\u0131 ile veri minimizasyonunu birlikte tasarlay\u0131n.<\/p>\n

    S\u0131k sorulan sorular<\/h2>\n
    \n
    Log Insight b\u00fct\u00fcn uygulama hatalar\u0131n\u0131 otomatik \u00e7\u00f6zer mi?<\/strong><\/dt>\n
    \n

    Hay\u0131r. Toplanan kay\u0131tlar\u0131 ara\u015ft\u0131rmay\u0131 destekler. Hatan\u0131n nedeni, uygulama ba\u011flam\u0131 ve \u00e7\u00f6z\u00fcm i\u00e7in yetkili i\u015fletim s\u00fcreci gerekir.<\/p>\n<\/dd>\n

    Daha uzun g\u00fcnl\u00fck saklamak her zaman daha iyi mi?<\/strong><\/dt>\n
    \n

    Saklama ihtiyaca ba\u011fl\u0131d\u0131r. Maliyet, hassas veri, eri\u015fim riski ve yasal gereksinimler birlikte de\u011ferlendirilmelidir.<\/p>\n<\/dd>\n<\/dl>\n

    Sonraki ad\u0131m<\/h2>\n

    vROPS metrik analizi<\/a> ile g\u00fcnl\u00fcklerin g\u00f6revini kar\u015f\u0131la\u015ft\u0131r\u0131n. Bulut g\u00fcvenli\u011fi plan\u0131nda<\/a> g\u00fcnl\u00fck eri\u015fimi, saklama ve olay inceleme sorumlular\u0131n\u0131 belirleyin.<\/p>\n

    Kaynaklar<\/h2>\n
      \n
    1. Broadcom \u2014 Aria Operations for Logs 8.18 deployment and collection scope<\/a><\/li>\n
    2. NIST SP 800-92 \u2014 Guide to Computer Security Log Management<\/a><\/li>\n
    3. RFC 5424 \u2014 The Syslog Protocol<\/a><\/li>\n
    4. Broadcom \u2014 VCF 9.1 configuring and analyzing logs<\/a><\/li>\n<\/ol>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

      Merkezi g\u00fcnl\u00fck analizi, VMware Log Insight ortam\u0131n\u0131 de\u011ferlendiren ekiplerin sistem ve uygulama kay\u0131tlar\u0131n\u0131 ortak bir arama ve inceleme s\u00fcrecinde ele almas\u0131n\u0131 sa\u011flar. Farkl\u0131 bile\u015fenlerdeki olaylar zaman ve ba\u011flam \u00fczerinden kar\u015f\u0131la\u015ft\u0131r\u0131labilir. Ancak veri toplanmas\u0131, olay\u0131n do\u011fru yorumland\u0131\u011f\u0131n\u0131 veya b\u00fct\u00fcn kaynaklar\u0131n kapsand\u0131\u011f\u0131n\u0131 kendili\u011finden g\u00f6stermez. \u0130letim, ayr\u0131\u015ft\u0131rma ve ara\u015ft\u0131rma ayr\u0131 kontrol noktalar\u0131d\u0131r.G\u00f6rseli b\u00fcy\u00fct \u2192 Merkezi g\u00fcnl\u00fck neden gereklidir? […]<\/p>\n","protected":false},"author":3,"featured_media":1381,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31,26,24,25],"tags":[115,114,112,113,96,99],"class_list":["post-799","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guvenlik","category-bilgi-islem","category-bulut-danismanlik-hizmeti","category-buluta-genel-bakis","tag-izleme","tag-kayit-yonetimi","tag-log-insight","tag-log-yonetimi","tag-sanallastirma","tag-vmware"],"_links":{"self":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/799","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/comments?post=799"}],"version-history":[{"count":3,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/799\/revisions"}],"predecessor-version":[{"id":814,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/799\/revisions\/814"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/media\/1381"}],"wp:attachment":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/media?parent=799"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/categories?post=799"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/tags?post=799"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}