ISLSAC: Interactive Log Search and Analysis Commands
Feng Zou · 2025
Logs are an important source of data in the field of security analysis. Security analysis based on log data can quickly identify potential network security threats in the network environment. We define an interactive security log search and analysis command (ISLSAC) to address the issues of large and complex rules, as well as difficulty in updating them in a timely manner, in current rule-based security log analysis methods. ISLSAC enables analysts to generate real-time command generation and error correction prompts during the process of typing commands, solving the conversion difficulties and inefficiencies faced by users in converting their analysis needs to data processing. We have demonstrated the high efficiency and usability of ISLSAC in experiments from multiple dimensions such as syntax complexity, log analysis performance, and interactivity.