Paquet : logdata-anomaly-miner (0.0.7-1)
Liens pour logdata-anomaly-miner
Ressources Trisquel :
Télécharger le paquet source logdata-anomaly-miner :
- [logdata-anomaly-miner_0.0.7-1.dsc]
- [logdata-anomaly-miner_0.0.7.orig.tar.gz]
- [logdata-anomaly-miner_0.0.7-1.debian.tar.xz]
Responsable :
Original Maintainer:
- Roman Fiedler
Ressources externes :
- Page d'accueil [launchpad.net]
Paquets similaires :
This tool allows one to create log analysis pipelines
to analyze log data streams and detect violations or anomalies in it. It can be run from console, as daemon with e-mail alerting or embedded as library into own programs. It was designed to run the analysis with limited resources and lowest possible permissions to make it suitable for production server use. Analysis methods include:
* static check patterns similar to logcheck but with extended syntax and options. * detection of new data elements (IPs, user names, MAC addresses) * statistical anomalies in log line values and frequencies * correlation rules between log lines as described in th AECID approach http://dx.doi.org/10.1016/j.cose.2014.09.006
The tool is suitable to replace logcheck but also to operate as a sensor feeding a SIEM.
Please report bugs at https://bugs.launchpad.net/logdata-anomaly-miner/+filebug
Autres paquets associés à logdata-anomaly-miner
|
|
|
-
- dep: init-system-helpers (>= 1.18~)
- helper tools for all init systems
-
- dep: python
- interactive high-level object-oriented language (default version)
-
- dep: python-tz
- Python version of the Olson timezone database
-
- dep: python2.7
- Interactive high-level object-oriented language (version 2.7)
-
- sug: python-scipy
- scientific tools for Python
Télécharger logdata-anomaly-miner
Architecture | Taille du paquet | Espace occupé une fois installé | Fichiers |
---|---|---|---|
all | 93,5 ko | 421 ko | [liste des fichiers] |