Sciweavers

Share
LISA
2004

Real-time Log File Analysis Using the Simple Event Correlator (SEC)

9 years 9 months ago
Real-time Log File Analysis Using the Simple Event Correlator (SEC)
Originally published at Usenix LISA 2004 conference. November 2004 Atlanta, Georiga, USA. Log analysis is an important way to keep track of computers and networks. The use of automated analysis always results in false reports, however these can be minimized by proper specification of recognition criteria. Current analysis approaches fail to provide sufficient support for the recognizing the temporal component of log analysis. Temporal recognition of event sequences fall into distinct patterns that can be used to reduce false alerts and improve the efficiency of response to problems. This paper discusses these patterns while describing the rationale behind and implementation of a ruleset created at the CS department of the University of Massachusetts at Boston for SEC - the Simple Event Correlation program.
John P. Rouillard
Added 31 Oct 2010
Updated 31 Oct 2010
Type Conference
Year 2004
Where LISA
Authors John P. Rouillard
Comments (0)
books