Appreciate your log data

摘要

Log data are like streams of non-stop "tweets" coming from nearly every IT asset in one's infrastructure. By mining this information and managing it proac-tively - instead of ignoring it until something goes wrong - organizations can mitigate risk, ensure service availability and promote operational efficiency. Log data provides an immutable "fingerprint" of user and system activity. It can reveal something as simple as a failed logon. Or, where there are significant deviations from established baselines, it may indicate a runaway application or an actual security breach.