Posts by Rapid7

7 min IT Ops

Do you need an Architect in a Software Company?

This may be a dangerous question to ask for someone whose role is that of an Architect, but I think it is a valid question for an Architect to ask. This is particularly true in the software industry where the role is interpreted in many different ways. In some cases, an Architect may work in an established enterprise company and hand down instructions on technology stacks to the developers. At the other extreme an Agile development team may work without the involvement of an Architect. Neither

7 min IT Ops

Log Analysis for Containers

Introduction The IT and DevOps world has come a long way with infrastructure. Virtualization revolutionized our ability to quickly deploy an application and scale up services when needed, paying only for the computing power used. Over the last few years, agile methodologies and continuous delivery have pushed VMs to their limits. Many teams still repeatedly use a single VM for releases and testing. Production VMs rarely change unless something goes seriously wrong. At the pace software develop

4 min IT Ops

Common Angular Routing Challenges

When it comes to frameworks, no one is perfect. As we migrate the Logentries application from legacy code to Angular, we’ve encountered a few interesting challenges along the way that we’ve enjoyed investigating and resolving. While specific challenges often depend on your project and migration strategy, the aim of this post is to share our solutions to problems one may encounter when migrating an app to Angular. In particular, I’ll focus on how Angular handles routing and some issues we’ve en

1 min IT Ops

Best Practices for Container Log Analysis: Part 2

This 3-part series explores the challenges presented by containers and the advantages of using an end-to-end container log monitoring solution for complete container environment visibility. [http://info.logentries.com/log-analysis-containers] When working with containers, setting up a local image repository like Docker’s Registry can enable a team to iterate quickly, easily storing image versions in a central location to be used as needed. Yet as multiple team members update images, start, st

1 min IT Ops

Best Practices for Container Log Analysis: Part 1

This 3-part series explores the challenges presented by containers and the advantages of using an end-to-end container log monitoring solution for complete container environment visibility. [http://info.logentries.com/log-analysis-containers] As container environments become mainstream, it’s important to consider the most common challenges of migrating a monolithic application into containerized microservices and how to overcome them. While containers introduce new levels of flexibility from

3 min IT Ops

What is Elastic Logging?

We’re all familiar with the concept of “Elasticity” – the way cloud infrastructures can automatically react to their required workloads, scaling resources up or down as needed. While elastic environments provide us with much needed flexibility, they have also historically presented challenges when trying to monitor activity from their ephemeral components. Automatically accounting for new nodes can be tricky while scaling up. And when scaling down, data associated with these nodes is potentially

14 min IT Ops

State of Log Management for AWS

Introduction The Log Management [https://www.rapid7.com/fundamentals/what-is-log-management/] industry was traditionally driven by regulatory compliance and security concerns resulting in a multi-billion dollar market focused on security and information event management (SIEM) solutions. However, log management has evolved into a market that is focused on both the management and analytics of log data. Log management technologies are becoming more powerful and dynamic, allowing for data to be

3 min IT Ops

Using Log Aggregation Across Dev & Ops: The Pricing Advantage

Rob Thatcher is Co-founder and Principal Consultant at Skelton Thatcher Consulting [http://skeltonthatcher.com/]. Summary: the pricing of tools or licenses for log aggregation can have a significant effect on organizational culture and the collaboration between Dev and Ops teams. Modern tools for log aggregation (of which Logentries [https://logentries.com]is one example) can be hugely enabling for DevOps approaches to building and operating business-critical software systems. However, the pri

3 min IT Ops

How to Add a GPS Time Source to ntpd

USB GPS dongles have come down significantly in price in recent years and I picked one up to play with recently. Apart from using a GPS module to report your latitude, longitude, altitude and time for mapping applications, it’s also possible to feed the time information to ntpd as a back-up time source or as a highly accurate time source depending on the GPS module you end up getting. [/content/images/le-img/2015/07/adding-gps-time-source-to-ntpd.png] The module that I use in this blog post

2 min IT Ops

Playing with Java 8's Completable Futures

Of the many additions to Java 8 such as the Stream API [https://docs.oracle.com/javase/8/docs/api/java/util/stream/Stream.html] and lambdas [https://docs.oracle.com/javase/tutorial/java/javaOO/lambdaexpressions.html], I noticed one of the lesser talked about ones was CompletableFutures [https://docs.oracle.com/javase/8/docs/api/java/util/concurrent/CompletableFuture.html] . So I decided to have a play around with them on the last Java component I wrote. My use case in a nutshell was piping larg

4 min IT Ops

Ditch the Debugger and Use Log Analysis Instead

This guest blog post is written by Matthew Skelton, Co-founder and Principal Consultant at Skelton Thatcher Consulting. -------------------------------------------------------------------------------- Summary: As a Developer, you cannot attach the debugger to your application in Production, but you can use logging in a way that helps you easily diagnose problems in both development AND Production. You also get to make friends with Operations people – win! The applications we’re developing and

1 min IT Ops

10 Best Practices for Log Management & Analytics: Part 1

[http://info.logentries.com/log-management-best-practices] This 3-part series covers Logentries’ 10 best practices for log management and analytics. To download the complete article, click here [https://information.rapid7.com/insightops-10-best-practices-for-log-management-and-analytics.html] . As applications, hosting environments and infrastructure continue to grow in size and complexity, having a well defined set of logging strategies and practices is more important than ever. In Logentri

2 min IT Ops

Using Log Data Streams for Real-Time Analytics: Part 1

This 3-part series explores the definition and benefits of using log data streams and real-time analytics for some common IT Ops uses cases. To download the complete article,click here [http://info.logentries.com/real-time-analytics] . [http://info.logentries.com/real-time-analytics] Analytics tools are often focused on analyzing historical data. Taking a sample of data from historical events, you can perform calculations to determine what happened during that period of time and report on you

6 min IT Ops

How to Implement ANTLR4 Autocomplete

Antlr4 [http://www.antlr.org/] is a new iteration of a popular Antlr parse tree generator. Antlr4 features great documentation [https://theantlrguy.atlassian.net/wiki/display/ANTLR4/ANTLR+4+Documentation] and an in-depth book [https://pragprog.com/book/tpantlr2/the-definitive-antlr-4-reference] on the subject. However, the topic of autocompletion lacks any substantive material. I hope this article will steer you in the right direction if you are looking to implement autocomplete functionality

3 min Metasploit Weekly Wrapup

Weekly Metasploit Wrapup: Two More Flash Exploits

While Adobe has made great progress in releasing both regular and emergency updates to Flash, it's becoming clear that Flash itself is becoming an albatross around the neck of every browser.