[lug] Modern log analysis?

[Rob Nagler]

What do people use for log analysis to detect bugs and threats in
real-time?

Once upon a time, I thought Bayesian log analysis would take over, but
searches show up papers and a few v.2 packages.  Now I also hoped for
machine learning approaches, but not much there either.

It seems that Nagios, Splunk,  Loggly, etc, are about you doing the work of
figuring out what's important and what's not by using pattern matching of
some sort (e.g. if 10 of event X in 10 minutes send an alert). That's fine,
but it requires A LOT of work. It even seems that you are expected to look
at fancy dashboard and run reports looking for problems. I've got other
things to do...

Any recommendations?

TIA,
Rob
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lug.boulder.co.us/pipermail/lug/attachments/20180605/13d58242/attachment.html>