# School project - Analysis of Intranet appliaction traffic **URL:** \ **Category:** Elasticsearch\ **Created:** [October 15, 2014, 8:38am UTC](https://discuss.elastic.co/t/school-project-analysis-of-intranet-appliaction-traffic/20261 "2014-10-15T08:38:12Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Vojtech\_Basta](https://avatars.discourse-cdn.com/v4/letter/v/ad7895/32.png) [@Vojtech\_Basta](https://discuss.elastic.co/u/Vojtech_Basta)\ **Post date:** [October 15, 2014, 8:38am UTC](https://discuss.elastic.co/t/school-project-analysis-of-intranet-appliaction-traffic/20261/1 "2014-10-15T08:38:12Z")
Hey! Every GET/POST request to the university intranet is tracked and saved to a table that contains following information: - UserId - Date - IPAddress - TargetUrl - BrowserInfo (headers) - ResponseTime (in miliseconds) This is database is running on another server and I need to replicate the data on another server. I would like to persist the data and then perform some statistical analysis and display alerts when something seems wrong. For example: - User is usually connecting from IP in CZ but now he logged from China - There is 50% more requests from this user compared to an average user. 1. Is this something that I should be able to achieve with logstash / elasticsearch? 2. What approach would you suggest to get data from external oracle database to logstash? 3. Does Elastic search support such queries or does it expose some API so it's possible to build alerting engine on top of it? Thanks a lot in advance! -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/0ffd37ab-3a72-4bbc-8c25-fd65e0e59384%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/0ffd37ab-3a72-4bbc-8c25-fd65e0e59384%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Alexandre\_Rafalovitc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alexandre_rafalovitc/32/1124_2.png) [@Alexandre\_Rafalovitc](https://discuss.elastic.co/u/Alexandre_Rafalovitc)\ **Post date:** [October 15, 2014, 10:30am UTC](https://discuss.elastic.co/t/school-project-analysis-of-intranet-appliaction-traffic/20261/2 "2014-10-15T10:30:02Z")
Your examples seem to be more from the Complex Event Processing domain: [Complex event processing - Wikipedia](http://en.wikipedia.org/wiki/Complex_event_processing) Regards, Alex. Personal: [http://www.outerthoughts.com/](http://www.outerthoughts.com/) and @arafalov Solr resources and newsletter: [http://www.solr-start.com/](http://www.solr-start.com/) and @solrstart Solr popularizers community: [Sign Up | LinkedIn](https://www.linkedin.com/groups?gid=6713853) On 15 October 2014 04:38, Vojtěch Bašta [vojtech@nabastu.cz](mailto:vojtech@nabastu.cz) wrote: > Hey! > > Every GET/POST request to the university intranet is tracked and saved to a > table that contains following information: > > - UserId > - Date > - IPAddress > - TargetUrl > - BrowserInfo (headers) > - ResponseTime (in miliseconds) > > This is database is running on another server and I need to replicate the > data on another server. > > I would like to persist the data and then perform some statistical analysis > and display alerts when something seems wrong. For example: > > - User is usually connecting from IP in CZ but now he logged from China > - There is 50% more requests from this user compared to an average user. > > 1. Is this something that I should be able to achieve with logstash / > elasticsearch? > 2. What approach would you suggest to get data from external oracle database > to logstash? > 3. Does Elastic search support such queries or does it expose some API so > it's possible to build alerting engine on top of it? > > Thanks a lot in advance! > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/0ffd37ab-3a72-4bbc-8c25-fd65e0e59384%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/0ffd37ab-3a72-4bbc-8c25-fd65e0e59384%40googlegroups.com). > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEFAe-HoXGENNJG8G3FnEK\_vhZQncooB1qQzPvXjgCD9DmaQJQ%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEFAe-HoXGENNJG8G3FnEK_vhZQncooB1qQzPvXjgCD9DmaQJQ%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 12:56am UTC](https://discuss.elastic.co/t/school-project-analysis-of-intranet-appliaction-traffic/20261/3 "2017-07-06T00:56:05Z")