This presentation can also be considered a sequel to my "Choosing a Log Management Approach" presentation, which was my previous SANS Lunch and Learn preso.
If you are involved / about to be involved with logging, read both (first, second)!
It is also embedded below:
Possibly related material:
- All my presentation on Slideshare.