Definition
Event data records are created whenever some sort of transaction occurs. Event data records are generated at an extremely granular level by business applications, IT infrastructure, and security systems. Almost any type of record that is created to record a transaction and affixed with a timestamp meets the definition of an event data.
The contents of event data records are extremely crude and often meaningless unless correlated with other event data records.
Examples include business applications such as SAP, Oracle, IIS and thousands of others.
Examples of IT infrastructure includes servers, internetworking devices manufactured by Cisco and others, telecommunication switches, a SAN and message queues between systems.
Examples of security systems range from authentication applications including LDAP and RACF as well as IDS applications and other security systems.
A typical organization will have hundreds of sources of event records.
A single business transaction such as withdrawing cash from an Automated teller machine (ATM) or a customer placing an order will generate several hundred event data records in dozens of federated log files. It is not uncommon for organizations to generate terabytes of event data every day.
The retention and ability to quickly inspect event data records has become a necessity for the purposes of detecting suspicious activity, insider threats and other security breaches.
Read more about this topic: Event Data
Famous quotes containing the word definition:
“No man, not even a doctor, ever gives any other definition of what a nurse should be than this—”devoted and obedient.” This definition would do just as well for a porter. It might even do for a horse. It would not do for a policeman.”
—Florence Nightingale (1820–1910)
“The man who knows governments most completely is he who troubles himself least about a definition which shall give their essence. Enjoying an intimate acquaintance with all their particularities in turn, he would naturally regard an abstract conception in which these were unified as a thing more misleading than enlightening.”
—William James (1842–1910)
“Was man made stupid to see his own stupidity?
Is God by definition indifferent, beyond us all?
Is the eternal truth man’s fighting soul
Wherein the Beast ravens in its own avidity?”
—Richard Eberhart (b. 1904)