|
|
LogAnalysis
[logs] How to define Log, Event, and Alert? Jul 23 2008 03:26PM Heinbockel, Bill (heinbockel mitre org) (3 replies) Re: [logs] How to define Log, Event, and Alert? Jul 23 2008 05:47PM Ron Gula (rgula tenablesecurity com) (1 replies) Re: [logs] How to define Log, Event, and Alert? Jul 23 2008 08:21PM Anton Chuvakin (anton chuvakin org) (3 replies) Re: [logs] How to define Log, Event, and Alert? Jul 23 2008 09:22PM David Corlette (DCorlette novell com) Re: [logs] How to define Log, Event, and Alert? Jul 23 2008 09:12PM Andrew Hay (andrewsmhay gmail com) (2 replies) Re: [logs] How to define Log, Event, and Alert? Jul 24 2008 12:59PM Ron Gula (rgula tenablesecurity com) (1 replies) Re: [logs] How to define Log, Event, and Alert? Jul 24 2008 04:17PM Andrew Hay (andrewsmhay gmail com) Re: [logs] How to define Log, Event, and Alert? Jul 23 2008 09:33PM Anton Chuvakin (anton chuvakin org) RE: [logs] How to define Log, Event, and Alert? Jul 23 2008 08:56PM Tina Bird (tbird precision-guesswork com) (2 replies) [logs] RE: How to define Log, Event, and Alert? Jul 24 2008 02:55PM Heinbockel, Bill (heinbockel mitre org) RE: [logs] How to define Log, Event, and Alert? Jul 24 2008 09:36AM Rainer Gerhards (rgerhards hq adiscon com) Re: [logs] How to define Log, Event, and Alert? Jul 23 2008 03:45PM Bill Scherr IV (bschnzl cotse net) (2 replies) Re: [logs] How to define Log, Event, and Alert? Jul 23 2008 05:37PM Michael Kinsley (michael kinsley sensage com) Re: [logs] How to define Log, Event, and Alert? Jul 23 2008 04:40PM Chris Lonvick (clonvick cisco com) |
|
Privacy Statement |
> Log (n):
> The record comprising one or more log entries accumulated over
> a given period. This may be electronic (e.g. stored in memory, disk,
> software, database, text file, etc), physical (e.g. on paper), or even
> verbal (e.g., "Between 10:00 and 10:01 we received a series of several
yes verbal if and only if it is a reviewable record, eg recorded.
> What do you think?
key aspects of a log are that it describe 1) what happened and 2) when.
i think "log entry" is clearer than "message" from rfc3164.
so a log is one or more log entries, log entries may indicate events,
and events may warrant alerts. seems good to me.
-jon<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><blockquote type="cite"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><br></div></blockquote></div><div><blockquote type="cite"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Log (n):</div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "> The record comprising one or more log entries accumulated over</div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">a given period. This may be electronic (e.g. stored in memory, disk,</div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">software, database, text file, etc), physical (e.g. on paper), or even</div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">verbal (e.g., "Between 10:00 and 10:01 we received a series of several</div></blockquote><br></div><div>yes verbal if and only if it is a reviewable record, eg recorded.</div><div><br></div><div><blockquote type="cite"><span class="Apple-style-span" style="-webkit-text-stroke-width: -1; ">What do you think?</span></blockquote><div><font class="Apple-style-span" color="#0000DD"><span class="Apple-style-span" style="-webkit-text-stroke-width: -1;"><br class="webkit-block-placeholder"></span></font></div></div><div>key aspects of a log are that it describe 1) what happened and 2) when.</div><div><br class="webkit-block-placeholder"></div><div>i think "log entry" is clearer than "message" from rfc3164.</div><div><br class="webkit-block-placeholder"></div><div>so a log is one or more log entries, log entries may indicate events, and events may warrant alerts. seems good to me.</div><div><br class="webkit-block-placeholder"></div><div>-jon</div></body></html>____
___________________________________________
LogAnalysis mailing list
LogAnalysis (at) loganalysis (dot) org [email concealed]
http://www.loganalysis.org/mailman/listinfo/loganalysis
[ reply ]