NetLogger Methodology

The NetLogger methodology is really quite simple. It consists of the following:

1. All components must be instrumented to produce monitoring These components include application software, middleware, operating system, and networks. The more components that are instrumented the better.
2. All monitoring events must use a common format and common set of attributes. Monitoring events most also all contain a precision timestamp which is in a single timezone (GMT) and globally synchronized via a clock synchronization method such as NTP.
3. Log all of the following events: Entering and exiting any program or software component, and begin/end of all IO (disk and network).
4. Collect all log data in a central location
5. Use event correlation and visualization tools to analyze the monitoring event logs.