Re: How to define Log, Event, and Alert?
"Andrew Hay" <[email protected]> Thu, 24 Jul 2008 13:17:01 -0300
| Newsgroups | gmane.comp.sysutils.loganalysis |
|---|---|
| Message-ID | <[email protected]> |
I guess the real problem is trying to describe something that is best described by referring to itself. For example, if you were asked to explain what a triangle looked like you'd probably have a hard time explaining it without somehow calling it a "triangular geometric shape". On Thu, Jul 24, 2008 at 9:59 AM, Ron Gula <[email protected]> wrote: > Andrew Hay wrote: >> >> How about referring to an event as: >> >> "A discrete, distinct, and discernible occurrence of interest within >> an environment" >> >> Thoughts? > > I agree with Anton. "Interest" is in the eye of the beholder, or at least > the correlation and report engine. > > Ron > _______________________________________________ > LogAnalysis mailing list > [email protected] > http://www.loganalysis.org/mailman/listinfo/loganalysis > -- Andrew Hay Security+, CCSE Plus, RHCE, GSEC, GCIA, GCIH, CISSP blog: http://www.andrewhay.ca email: [email protected] twitter: andrewsmhay profile: http://www.linkedin.com/in/andrewhay