Logs Data Platform - Responsibility sharing

View as Markdown

The Logs Data Platform is an interface for collecting, indexing, and analyzing logs. Wherever your logs come from, you can use the platform to choose different entry points depending on the protocol, security level, and format. You can analyze and use data with a variety of different APIs and web interfaces.

The RACI below details shared responsibilities between OVHcloud and the customer for Logs Data Platform services. This shared model can help relieve the customer’s operational burden.

RACI definition

Roles
R: Responsible for carrying out the process
A: Accountable for the successful completion of the process
C: Consulted during the process
I: Informed of the results of the process

For your information, a Log forwarder agent is considered a tool (full software, script, or library) that is required to forward logs to LDP.

1. Before subscription

1.1. Specify service as needed

Activity	Customer	OVHcloud
Learn about the capabilities and limitations of the service detailed in the OVHcloud documentation or commercial page	RA	I
Choose service location	RA	I
Choose service offer: standard or enterprise	RA	I

2. Service availability

2.1. Install service

Activity	Customer	OVHcloud
Install, configure, and deliver functional components of the service	I	RA
Setup audit trails as a stream on dedicated clusters (enterprise)	I	RA
Produce, route, deliver, and maintain physical machines, virtual machines, and hosting buildings		RA

2.2. Reversibility model

Activity	Customer	OVHcloud
Offer standard solutions and protocols for importing and exporting data using API for logs and dashboards	I	RA
Decide to use ldp-archive-mirror for data export and local analysis	RA

2.3. Customer Information System setup

Activity	Customer	OVHcloud
Choose service options following business needs	RA	I
Order and configure streams on Logs Data Platform	RA	I
Define retention policy following legal requirements (for hot storage and cold storage)	RA
Install and configure the log forwarder agent and adapt its buffer following the needs and purpose of the processing	RA
Manage cold storage archives with encryption keys provided by the Customer	AI	R

3. Service usage

3.1. Operations

3.1.1. Daily operations

Activity	Customer	OVHcloud
Manage network accessibility of the Platform		RA
Decide to add/delete resources to the existing service		RA
Manage confidentiality and integrity of data hosted on the service	RA
Manage risks of the log forwarder agent	RA
Manage backups on the service (logs and dashboards)	RA
Manage backups on service management infrastructure		RA
Adapt log forwarder agent configuration following IS evolution	RA
Decide to observe audit trails available in the audit stream (enterprise)	RA

3.1.2. Access management

Activity	Customer	OVHcloud
Manage OVHcloud teams’ physical access to infrastructures		RA
Manage OVHcloud teams’ logical access to infrastructures	I	RA
Manage access to the OVHcloud Control Panel (Manager, network ACLs, MFA, API, token, ...)	RA	I
Decide to renew the password at least every quarter	RA	I
Manage access to management interfaces specific to Logs Data Platform (streams, dashboards,...)	RA	I
Manage security risks of the log forwarding configuration (transport, protocols, ...)	RA
Manage network configuration of the subscribed data-gathering tool(s)	RA	I

3.1.3. Monitoring

Activity	Customer	OVHcloud
Monitor the proper functioning of log forwarder agent	RA
Monitor physical (e.g. devices) and virtual resource performance		RA
Manage hardware sizing on the service		RA
Monitor service performance		RA
Keep logs of the Control Plane that manages Logs Data Platform		RA

3.1.4. Storage

Activity	Customer	OVHcloud
Keep the content sent to Logs Data Platform adequate, relevant, and appropriate	RA
Manage data immutability	I	RA
Perform storage device maintenance		RA
Create, modify, control, restore, and delete internal backup jobs on management infrastructure	I	RA

3.1.5. Connectivity

Activity	Customer	OVHcloud
Operate network management systems (architecture, implementation, software, and hardware maintenance for deployed public and private networks)		RA
Manage IP addressing plan on hosted data gathering tools	RA	I
Manage IP addressing plan on dedicated clusters (enterprise)	RA	I

3.1.6. Management

Activity	Customer	OVHcloud
Provide inventory of the service used	I	RA
Manage service register following legal requirements	RA
Manage the physical security of equipment and infrastructures hosted at OVHcloud	I	RA
Maintain Standard Logs Data Platform services and their extensions	I	RA
Maintain Enterprise Logs Data Platform services and their extensions	CI	RA
Ensure that external tools remain compatible with the Logs Data Platform's major updates	RA
Handle the major upgrade of the subscribed data gathering tool(s) regarding the external tool's compatibility	RA

3.1.7. Business continuity

Activity	Customer	OVHcloud
Manage automatic management systems for the infrastructure provided	I	RA
Maintain a business continuity and disaster recovery plan for hosted services (logs, dashboards, ...)	RA	I

3.2. Event management

3.2.1. Incidents

Activity	Customer	OVHcloud
Intervene with Logs Data Platform managed elements	I	RA
Manage incidents and their consequences on log forwarder agent component	RA
Notify incidents on the LDP service with the ticketing system	RA	I

3.2.2. Changes

Activity	Customer	OVHcloud
Deploy patches, update software and information systems hosted in Logs Data Platform (standard)	I	RA
Deploy patches, update software and information systems hosted in Logs Data Platform (enterprise)	CI	RA
Deploy patches, update and configure the log forwarder agent using Logs Data Platform	RA
Perform preventive interventions on managed elements of Logs Data Platform	I	RA

4. Reverting

4.1. Reversibility model

Activity	Customer	OVHcloud
Schedule reversibility operations	RA
Choose fallback infrastructures	RA

4.2. Data recovery

Activity	Customer	OVHcloud
Manage reversibility operations: manual extract, using API, ldp-archive-mirror	RA
Migrate/transfer data	RA

5. End of service

5.1. Configuration destruction

Activity	Customer	OVHcloud
Delete Logs Data Platform objects configuration (streams, dashboards, index, ...)	RA	I
Decommission log forwarder agent	RA
Decommission of the client service following contract termination	I	RA

5.2. Data destruction

Activity	Customer	OVHcloud
Destroy indexed activity	I	RA
Destroy long-term archives	I	RA
Destroy configuration data	I	RA

Go further

Browse all the Logs Data Platform guides.

Browse the rest of the OVHcloud US documentation for guides on our other products and services.

Learn more about Logs Data Platform on the OVHcloud US website.