This paper talks about using system logs in order to discover the “root cause” of the problem. The process discussed is “detection, identification, determination, resolution and reflection.” Great! But the article claims that you have to search logs in order to discover the real issue.
This is where I disagree.
If you are using some supposeduly sophisticated application to search logs, why don’t you use that same software (or, appliance, whatever) to highlight the root causes for you? I would prefer the intelligence of this software to be utilized for showing me what I need to know as opposed to for letting me search and then figure out what the results are until my brain turns blue…
And, in case you are wondering, its not easy to do it, but it sure is possible.