Chapter 1. Overview

This FileHandler allows to analyze Linux Accounting log files in the format defined by the Linux kernel (see man page for acct).

It provides a way to scan a directory for updated and new log files and will load the information therein into a compacted representation in memory.

After loading the data can be filtered for display using an XML file containing the filter criteria. (Such a filter can also be used to limit the entries which get loaded into memory).

Based on that information, various reports can be viewed which aggregate the statistics in the most interesting areas. Within these reports it is possible to select the interesting parts from the overall log entry table. This allows to understand the corresponding user behavior in their context.

A refresh algorithm will check for updated log files on disk and will only reload those parts that are necessary, thus reducing analyzing overhead to a minimum.