NMI-EDIT End-To-End Diagnostic Advisory Group BOF (PDF)

More documents

Recommendations

Info

What types of input events? • Application and Host • Syslog • /var/log/* • http-access/error • MS specific (security, application and event logs) • Application specific (AFS, SHIB, LDAP, SMTP, etc.) • “many others” •Network •NetFlow •SNMP •RMON • Others? •Security •IDS • Cisco CNS • Snort • Others? 14 April 2004 16
Enabling <strong>Diagnostic</strong> Applications With a Common Event Descriptor <strong>Diagnostic</strong> applications (Middleware, Network, Security) can extract event data from multiple data sets Dissemination Network Collection and Normalization of Events Middleware Related Events Network Related Events Security Related Events 14 April 2004 17
Page 1 and 2: NMI End-to-End Diagnostic Advisory
Page 3 and 4: Review of Year One Goals Engage NMI
Page 5 and 6: Requirements Gathering •Identify
Page 7 and 8: •Progress Report Outline • Revi
Page 9 and 10: Survey Findings • Highly speciali
Page 13 and 14: Architecture Goals • Expose a wid
Page 15: Steps to Enable Diagnostic Applicat
Page 19 and 20: Event Record Event Descriptor Meta
Page 21 and 22: Event Record Event Descriptor Meta
Page 23 and 24: Event Record Overhead Event Descrip
Page 25 and 26: Simple Implementation Enterprise We
Page 27 and 28: Complex Implementation Alerting app
Page 29 and 30: Host or Security Events Diagnostic
Page 33 and 34: • Participants Present Efforts (2
Page 35 and 36: Pilot Feature Roadmap • Collectio
Page 37 and 38: Year One Activity Timeline Month Ac
Page 39: •Progress Report Outline • Revi

NMI-EDIT End-To-End Diagnostic Advisory Group BOF (PDF)

Create successful ePaper yourself

Delete template?

Save as template?