NMI-EDIT End-To-End Diagnostic Advisory Group BOF (PDF)

More documents

Recommendations

Info

Steps to Enable <strong>Diagnostic</strong> Applications • Establish the common event record • Enable the collection of events from a wide array of event sources • Network: NetFlow, SNMP, RMON, etc • Security: IDS, Snort, firewalls, etc • Applications: Shib, Dir, IM, P2P, smtpd, named, httpd, Kerberos, etc • Hosts: /var/log/*, Syslog, etc 14 April 2004 14
Steps to Enable <strong>Diagnostic</strong> Applications (2) • Build tools to create dissemination infrastructures that, • Allows access to the diagnostic data • Provides operators to filter, anonymize, aggregate, tag, store and archive the data • Enables pipelining of data operators to organize and manipulate diagnostic data based on an organization or federations policies • Provide a common API so applications can access the diagnostic data 14 April 2004 15
Page 1 and 2: NMI End-to-End Diagnostic Advisory
Page 3 and 4: Review of Year One Goals Engage NMI
Page 5 and 6: Requirements Gathering •Identify
Page 7 and 8: •Progress Report Outline • Revi
Page 9 and 10: Survey Findings • Highly speciali
Page 13: Architecture Goals • Expose a wid
Page 17 and 18: Enabling Diagnostic Applications Wi
Page 19 and 20: Event Record Event Descriptor Meta
Page 21 and 22: Event Record Event Descriptor Meta
Page 23 and 24: Event Record Overhead Event Descrip
Page 25 and 26: Simple Implementation Enterprise We
Page 27 and 28: Complex Implementation Alerting app
Page 29 and 30: Host or Security Events Diagnostic
Page 33 and 34: • Participants Present Efforts (2
Page 35 and 36: Pilot Feature Roadmap • Collectio
Page 37 and 38: Year One Activity Timeline Month Ac
Page 39: •Progress Report Outline • Revi

NMI-EDIT End-To-End Diagnostic Advisory Group BOF (PDF)

Create successful ePaper yourself

Delete template?

Save as template?