Statlog

Overview

Statlog is a statistical log analyzer. It uses term weights to identify anomalies in Unix/Linux syslog files. The tool was created for data gathering for a research paper, Applying Term Weight Techniques to Event Log Analysis for Intrusion Detection (pdf).

Statlog is written in Perl. Since the original goal was research, not making a production tool, speed wasn't a huge concern. Any suggestions and contributions are welcome.

Download

statlog-0.1.tgz (14k)


Last modified: 08 Sept 2004
Contact: john-at-ibiblio-dot-org