Logblog: The Case for Universal Log Processing

« LogLogic and the SANS Institute Sponsor Industry’s First Log Management Summit | Main | Project Lasso Momentum Continues »

The Case for Universal Log Processing

Andreas Antonopoulos revealed some more wisdom from his interviews with 82 IT managers:

“The average enterprise has more than 1,200 applications, but even that number is increasing every year”.

I have always known that enterprises have many applications because a typical log management and intelligence RFP has requests for about 200 discrete log sources. The bigger point is that 70% of enterprise software applications are homegrown or highly customized. This means there are a lot of “one-off requests”.

Therefore, it doesn’t matter anymore how long your list is of “supported applications”. What really matters is how quickly you can support “unknown log types”. Nothing is better than instant gratification and so at LogLogic have opted for out-of-the-box support for unknown log types. We use natural language processing and machine learning algorithms to provide baseline support for any application that writes ASCII.

- Dominique

Posted May 31, 2006 in Log Management & Intelligence , LogEd , LogMatters | Permalink

Visit loglogic.com