Parser-Free Querying of Security Logs

Evan Luo, Julien Piet, David Wagner

Security analysts routinely query system logs to detect threats and investigate incidents, but each log source uses its own semi-structured format: logs are cheap to produce, but e…