Thursday, October 26, 2006

And We Will Fix It Soon, Won't We?

Raffy posted a nice summary of some of the recent discussions we've been involved lately. One interesting point was that when talking about log standards, "people are intermixing a lot of different topics." Specifically:

"a) Log format (syntax)
b) Event transport
c) Event classification (also called taxonomy, categorization, grammar)
d) Logging recommendations (what events specific devices should report AND what fields they should contain as a minimum [which some peple call 'scope of what to log']"

And, there are a few promising efforts underway to address that... fun stuff indeed.

Dr Anton Chuvakin