mozilla/browserid — pull request #2150 by jedp (2012-07-24 22:15:23+00:00)
Title: Added CEF logging at key points alongside our app logger

Issue #2131

CEF (common event format) logging will enable dev and security ops to use tools like ArcSight to more closely track security and system events.

To facilitate this, I have put an external CEF logging module together: https://github.com/jedp/node-cef. It sends log messages via UDP to a syslog service. The service is configured in our `lib/configuration.js`.

In this pull request, I have tried to make a more friendly API for the CEF logger, and implemented logging at key locations identified in this security review: https://wiki.mozilla.org/Security/Reviews/Identity/browserid

@ygjb @lloyd @ozten can you help me answer the following questions?

- Have I adhered properly to the CEF spec and practices?
- Is the CEF section in `lib/configuration.js` adequate (particularly for udp syslog)?
- Could the `cef_logger` API be made less obtrusive and more developer-friendly?

Many thanks!
j