Cubing Security Event Logs to make Realtime Analysis Possible

So I’m in the bar in Seville and I meet my mysterious log guru and relate to him my various conversations regarding the problems with managing the sheer volume of information from the various audit logs. So out of the blue he says “use cubes”. Now you have to understand that I haven’t got a clue what a cube is but for some reason it is like a magic phrase and I instantly know what he is talking about. Let me explain:-.Large enterprises have too much security data to...