Re: [logs] Logging - descriptive vs normative

Previous message: Raistlin: "Re: [logs] Logging: World Domination"
In reply to: Bill Hudacek: "Re: [logs] Logging - descriptive vs normative"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

raistlinat_private

> I
> recognize the need for categorization/classification (descriptive);

I am currently working out with some detail an intrusion detection system
(but it should be quite adapt to log parsing too) based on neural network
classifiers. I dismissed the possibility of analyzing system logs exactly
for the reasons being debated here.

A well defined token structure for log files would make them as easily
machine-readable as apache weblogs or TCPdump logs are.

XML is obviously an interesting choice, IMVHO, but really, any standard
format would do.

_______________________________________________
LogAnalysis mailing list
LogAnalysisat_private
https://lists.shmoo.com/mailman/listinfo/loganalysis