RE: [logs] checking logs for time holes

From: Clausing, James A (Jim), WCCO (jac@private)
Date: Tue Oct 07 2003 - 07:41:33 PDT

  • Next message: Rainer Gerhards: "[logs] Which features would you like to see in a web syslog viewer"

    	I have used sec (Simple Event Correlator) for that.  You can
    find the current release at
    -----Original Message-----
    From: Anton A. Chuvakin [mailto:anton@private]
    Sent: Monday, October 06, 2003 18:10
    To: loganalysis@private
    Subject: [logs] checking logs for time holes
    Loooong time ago I saw a program which was used to check log files for
    "time holes". So, for example, if you usually have a message from host
    "box1" every 3-5 minutes and this time there is a 30 minute hole with
    nothing from "box1", I want to know about it.
    I googled around trying to find smething of that sort, but with no
    results. Who can remind me about such program? I will be deeply
      Anton A. Chuvakin, Ph.D., GCI*
    LogAnalysis mailing list
    LogAnalysis mailing list

    This archive was generated by hypermail 2b30 : Tue Oct 07 2003 - 09:29:01 PDT