Log analysis techniques in Cybersecurity - Mini Project: Build & Apply

Log Analysis Techniques

📖 Scenario: You work as a cybersecurity analyst. Your job is to review system logs to find unusual activities that might indicate security problems.Logs are records of events happening on a computer or network. They help you understand what happened and when.

🎯 Goal: Build a simple log analysis setup that helps identify error messages and count how many times they appear.This will help you quickly spot problems in the system.

📋 What You'll Learn

Create a list of log entries with exact messages

Add a variable to count error messages

Use a loop to check each log entry for the word 'ERROR'

Increase the error count for each error found

💡 Why This Matters

🌍 Real World

Cybersecurity analysts use log analysis to detect security issues quickly by scanning logs for error or warning messages.

💼 Career

Understanding how to process and analyze logs is essential for roles in cybersecurity, system administration, and IT support.

1

Create the log entries list

Create a list called logs with these exact entries: 'INFO User logged in', 'ERROR Disk full', 'WARNING CPU usage high', 'ERROR Network timeout', 'INFO File saved'.

Cybersecurity

# Create the list of log entries
# Your code here

Need a hint?

Use square brackets [] to create a list and separate each log entry with commas.

2

Add an error counter variable

Create a variable called error_count and set it to 0 to keep track of how many error messages appear in the logs.

Cybersecurity

logs = ['INFO User logged in', 'ERROR Disk full', 'WARNING CPU usage high', 'ERROR Network timeout', 'INFO File saved']
# Create the error_count variable
# Your code here

Need a hint?

Set error_count to zero before counting errors.

3

Check logs for errors

Use a for loop with the variable entry to go through each item in logs. Inside the loop, use an if statement to check if the string 'ERROR' is in entry. If yes, increase error_count by 1.

Cybersecurity

logs = ['INFO User logged in', 'ERROR Disk full', 'WARNING CPU usage high', 'ERROR Network timeout', 'INFO File saved']
error_count = 0
# Loop through logs and count errors
# Your code here

Need a hint?

Use for entry in logs: to loop, then if 'ERROR' in entry: to check each log.

4

Add a final summary comment

Add a comment line that says # Total errors found: error_count to summarize the count of error messages found in the logs.

Cybersecurity

logs = ['INFO User logged in', 'ERROR Disk full', 'WARNING CPU usage high', 'ERROR Network timeout', 'INFO File saved']
error_count = 0
for entry in logs:
    if 'ERROR' in entry:
        error_count += 1
# Add a summary comment here
# Your code here

Need a hint?

Use a comment starting with # to add the summary.