The aim of the project is development and deployment of Intelligent logging server that collects and analyzes monitoring data from various sources. Correlation of outputs of an anomaly detection module, honeypot logs and other monitoring tools with central syslog server records will bring early warning and more precise recognition of attacks or anomalies than particular tools themselves. The system provides a query module that enables to aggregate and display all available information about a particular host or a part of network infrastructure. A prototype of the system will be deployed in the Masaryk University network.

Publications