[logs] databasing log files

Previous message: Rainer Gerhards: "RE: [logs] RE: Logging in the DMZ"
Next in thread: Brown, James (Jim): "RE: [logs] databasing log files"
Reply: Brown, James (Jim): "RE: [logs] databasing log files"
Reply: Paul Robertson: "Re: [logs] databasing log files"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

sween@private

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Recently, I have gone down the road of writing "engines" to grep on huge
amounts of log files and load them into a mysql instance to keep pertinent
data.  It works out pretty slick this way for obvious reasons...

My question to this list however, what are the legal ramifications of
storing data externally and not keeping the log files in their native
format? Does the validity of the exception in the log file get stunted
when removed from its native format?

- --
 ---  -sween
| M | http://www.modelm.org
 ---  "force feedback computing since 1984."
<meta name="MSSmartTagsPreventParsing" content="TRUE">

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQFAKZY/43hoCoA0jEERAh/nAJ45dfd/ftTkVtvJ/8iKOL5gBLJ0ZgCg0DJ2
xWc3qczm0pv/mq1szoVqBKQ=
=xIFR
-----END PGP SIGNATURE-----

_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis