I often have web logs when an incident happens and I need to analyse the activity to find out how it happened. So I do not have full logs, I just have it for last 2 hours before the incident or so. Is there nay handy software that I can import data into it to analyse? Most tools like Splunk requires regular connection to the web server to receive logs directly. But I am often given logs as a file.
It would be great if you provide your suggestions and let me know what usually people do for these cases.
Thanks in advance