Troubleshooting and Tool Report

1

Troubleshooting and Tool Recommendation: SITREP Sample Report

Problem:

Each of the networked 15 servers and 400 hosts are generating logs. Some of these logs are likely due to security issues. We only have 10 network security workers, and they don’t have the time to review each log that is generated across the network. This is a problem because the logs can identify security issues, host events, network optimization challenges, and errors. We need an automated method to collect, centrally store, and analyze the logs, only generating an alert when human intervention is needed.

Troubleshooting Steps:

[List the networking troubleshooting methodology]

Tool and Description:

To solve the problem identified, it is proposed that [Logstash] be implemented within the network. Logstash (a fictional tool) is a free and open server-side data processing pipeline that ingests data from varying sources, transforms it, and display the results. This tool allows for the collection of logs from virtually any source to include hosts, network devices, and servers. Most logs are in the format of their creator and therefore are not standardized across a network of systems. Logstash normalizes the logs by converting them into key fields and elements that are most important to network security and optimization. This allows users to program alerts on the Logstash server and automatically be alerted to only the most important log alerts. Logstash provides the ability to save time and human capital resources while ensuring network security and optimization capability.

2

Tool Operational Use Case:

Logstash is being employed in our network to solve the log analysis problem identified above. Once implemented and properly configured, we expect Logstash to allow us to comply with internal security policies and outside regulations and audits, understand and respond to data breachers and other security incidents, troubleshoot systems, computer, and network devices, understand user behaviors, and conduct forensics in the event of an investigation. The deployment of Logstash will also save us valuable time and resources given we only have 10 personnel. The log alerts will enable network support personnel to respond only to the most crucial alerts, while ensuring nothing of critical importance is not known.

Tool Functionality:

Once installed on the server and Linux operating system, the command functionality includes multiple options:

• Logstash start (this command starts the Logstash service)

• Logstash –f (this command identifies the log file location)

• Logstash –in (this command ingests the log files)

• Logstash –c (this command sets the number of files to ingest before stopping)

• Logstash –cs (this command sets the ingest to continuous)

• Logstash –a (this command sets the parameters to analyze and alert)

3

Example Screenshot of the Windows Command Prompt

Project 2: Troubleshooting and Tool Report Course: CMIT 265 7303 Fundamentals of Networking (2268)

Evaluation Criteria Exceeds Performance Requirements

Meets Performance Requirements

Approaches Performance Requirements

Does Not Meet Performance Requirements

Criterion Score

1.2.3: Explain spe-

cialized terms or

concepts to facili-

tate audience

comprehension.

/ 10

1.3.5: Adhere to

required attribu-

tion and citation

standards.

/ 10

1.4.1: Produce

grammatically cor-

rect material in

standard academic

English that sup-

ports the

communication.

/ 10

2.1.1: Identify the

issue or problem

under

consideration.

/ 10

2.3.1: State conclu-

sions or solutions

clearly and

precisely.

/ 10

10.1.1: Identify the

problem to be

solved.

/ 25

10 points

Explains specialized

terms or concepts

thoroughly and accu-

rately to facilitate and

enhance audience

comprehension.

8.5 points

Explains specialized

terms or concepts to

facilitate audience

comprehension.

7.5 points

Attempts to explain

specialized terms or

concepts, but there are

problems with accu-

racy of explanation, or

the explanation doesn't

enhance audience

comprehension.

0 points

Does not explain spe-

cialized terms or con-

cepts as needed.

10 points

Adheres fully and accu-

rately to required attri-

bution and citation

standards.

8.5 points

Adheres to required at-

tribution and citation

standards.

7.5 points

Attempts to adhere to

required attribution

and citation standards,

but there may be sig-

nificant lapses in cita-

tion and/or attribution.

0 points

Does not adhere to re-

quired attribution and

citation standards, ei-

ther failing to cite com-

pletely, or citing

incorrectly.

10 points

Produces grammati-

cally correct material in

flawless standard aca-

demic English that fully

supports the

communication.

8.5 points

Produces grammati-

cally correct material in

standard academic

English that supports

the communication.

7.5 points

Attempts to produce

grammatically correct

material in standard

academic English, but

mistakes in some areas

affect the credibility of

the communication.

0 points

Does not produce

grammatically correct

material, and the mis-

takes hamper the

communication.

10 points

Identifies the issue or

problem under consid-

eration in a clear and

thorough manner.

8.5 points

Identifies the issue or

problem under

consideration.

7.5 points

Attempts to Identify

the issue or problem

under consideration,

but there is a lack of

clarity or

thoroughness.

0 points

Does not identify the

issue or problem under

consideration.

10 points

States well-conceived

conclusions or solu-

tions clearly and

precisely.

8.5 points

States conclusions or

solutions clearly and

precisely.

7.5 points

Attempts to state con-

clusions or solutions,

but they are not clear

or precise.

0 points

Does not state conclu-

sions or solutions.

25 points

Presents a relevant IT

problem clearly and

specifically.

21.25 points

Presents an IT problem

that requires a

solution.

18.75 points

Identifies an IT prob-

lem but may lack clar-

ity and/or specificity

regarding the need to

be addressed.

0 points

Does not identify an IT

problem to be solved.

10/21/26, 11:38 PM Project 2: Troubleshooting and Tool Report - CMIT 265 7303 Fundamentals of Networking (2268) - UMGC Learning Management…

https://learn.umgc.edu/d2l/lms/dropbox/user/folder_submit_files.d2l?db=1980931&grpid=0&isprv=0&bp=0&ou=1521918 1/2

Total / 100

Overall Score

Evaluation Criteria Exceeds Performance Requirements

Meets Performance Requirements

Approaches Performance Requirements

Does Not Meet Performance Requirements

Criterion Score

13.1.1: Create doc-

umentation appro-

priate to the

stakeholder.

/ 2525 points

Creates thorough and

accurate IT documen-

tation that exceeds

requirements.

21.25 points

Creates IT documenta-

tion that meets

requirements.

18.75 points

Creates IT documenta-

tion that lacks detail

and/or does not fully

meet requirements.

0 points

Does not create appro-

priate IT

documentation.

Exceeds 90 points minimum

Meets 80 points minimum

Approaches 70 points minimum

Does Not Meet 0 points minimum

10/21/26, 11:38 PM Project 2: Troubleshooting and Tool Report - CMIT 265 7303 Fundamentals of Networking (2268) - UMGC Learning Management…

https://learn.umgc.edu/d2l/lms/dropbox/user/folder_submit_files.d2l?db=1980931&grpid=0&isprv=0&bp=0&ou=1521918 2/2