Presentació sobre intel·ligència operaciona, a càrrec de Maria Isabel Gandia (CSUC) durant la 12a edició del congrés del TF-NOC i 1a edició del congrés del SIG-NOC celebrat a la Universitat d'Stuttgart (Alemanya) els dies 8 i 9 d'abril del 2015.

1. Operational intelligence: Open
discussion
Maria Isabel Gandia Carriedo
12th TF-NOC meeting / 1st SIG-NOC meeting
8-9 Apr 2015
University of Stuttgart

2. Logs are data
awk & sed & grep & cut...

3. 3
Log aggregation/Operational intelligence

4. • Splunk
• Elk
• Graylog2
• LogTrust
• Other interesting tools?
4
Good tools help having Operational
Intelligence

5. 1. Try and negotiate with the SPLUNK resellers for a good deal.
2. See whether building a knowledge-base and sharing hands-on
experiences with the open-source ELK solution would help us.
3. …?
Now that we have learn a little bit more about Splunk and Elk, what path
would you choose?
Is it time to re-run the tools survey?
5
Possibilities

6. Thanks for your participation!
MariaIsabel.Gandia@csuc.cat