Syslog Data Analysis for Network Anomaly Detection Using Regular Expression Methods

Riki Ramdani Saputra; Viby Ladyscha Yalasena Winarno; Jesika Oktaviani

doi:10.51454/decode.v6i3.1682

Authors

Riki Ramdani Saputra Badan Riset dan Inovasi Nasional
Viby Ladyscha Yalasena Winarno Ilmu Komputer IPB University
Jesika Oktaviani Ilmu Komputer IPB University

DOI:

https://doi.org/10.51454/decode.v6i3.1682

Keywords:

Data Cleaning, Log Parsing, Log Server, Regular Expression, Syslog

Abstract

Data log pada Syslog server berperan penting dalam mendukung monitoring keamanan jaringan, namun umumnya masih tidak terstruktur sehingga mempersulit proses analisis. Penelitian ini bertujuan menerapkan Regular Expression (Regex) untuk melakukan data cleaning dan log parsing pada data Syslog agar lebih terstruktur dan mudah dianalisis. Metode yang digunakan meliputi normalisasi atribut Tag, Time, dan Host, ekstraksi informasi dari kolom Message menggunakan pola Common Event Format (CEF), penyimpanan data ke MySQL, serta pengembangan antarmuka berbasis web. Hasil penelitian menunjukkan bahwa Regex mampu menghasilkan data log yang lebih konsisten dan terstruktur untuk proses analisis. Sistem yang dikembangkan juga berhasil mengelola data melalui fitur pencarian, penyaringan, dan unggah data. Hasil Black Box Testing menunjukkan seluruh 5 skenario pengujian berhasil dijalankan dengan tingkat keberhasilan fungsional sebesar 100%. Penelitian ini menunjukkan bahwa penerapan Regex efektif dalam mendukung data cleaning, log parsing, dan monitoring keamanan jaringan berbasis Syslog.

References

Anton, A. A., Csereoka, P., Capota, E. A., & Cioargă, R. D. (2024). Enhancing Syslog Message Security and Reliability over Unidirectional Fiber Optics. Sensors, 24(20), 1–25. https://doi.org/10.3390/s24206537

Aulia, D., Telaumbanua, I. A. A., Putri, W. F., Wijaya, M. A., & Nurbaiti. (2023). Efektivitas Sistem Database Di Dalam Sistem Informasi Manajemen. Jurnal Ilmiah Sains Teknologi Dan Informasi, 1(3), 27–34. https://doi.org/10.59024/jiti.v1i3.283

Bai, Y., Chi, Y., & Zhao, D. (2023). PatCluster: A Top-Down Log Parsing Method Based on Frequent Words. IEEE Access, 11, 8275–8282. https://doi.org/10.1109/ACCESS.2023.3239012

Bintang, J. M., Ashshidiq, M. F., & Dzakwan, H. F. (2023). Penerapan Algoritma String Matching dan Regular Expression pada Aplikasi Kamus Besar Bahasa Indonesia (KBBI). BIOS Jurnal Teknologi Informasi dan Rekayasa Komputer, 4(1), 34-41. https://doi.org/10.37148/bios.v4i1.57

Cahyo, A. N., Hermawan, R., Wijaya, M. A. D., & Sari, A. P. (2025). Deteksi Teks Promosi Judi Online Pada Kolom Komentar YouTube dengan Metode Regex dan Fuzzy Matching. Jurnal RESTIKOM: Riset Teknik Informatika Dan Komputer, 7(2), 176–187. https://doi.org/10.52005/restikom.v7i2.441

Chuah, E., Kalutarage, H., Tasdemir, K., Abrham, A., & Maple, C. (2025). A Systematic Literature Review of Log-Correlation Tools for Cyberattack Detection and Prediction in Large Networks. Journal of Information Security and Applications, 92, 1–39. https://doi.org/10.1016/j.jisa.2025.104096

Hamid, M. F. (2022). Penanganan Situs Internet Bermuatan Negatif. DHARMASISYA Jurnal Program Magister Fakultas Hukum Universitas Indonesia, 2(2), 865–880.

He, P., Zhu, J., Zheng, Z., & Lyu, M. R. (2017). Drain: An Online Log Parsing Approach with Fixed Depth Tree. IEEE International Conference on Web Services (ICWS), 33–40. https://doi.org/10.1109/ICWS.2017.13

Huang, S., Wu, X., & Li, H. (2025). LogLSHD: Fast Log Parsing with Locality-Sensitive Hashing and Dynamic Time Warping. Companion Proceedings of the 33rd ACM Symposium on the Foundations of Software Engineering (FSE ’25), 1–10. https://doi.org/10.48550/arXiv.2504.02172

Junaedi, J., Maranto, A. R. K., Putri, M. P., & Suwitno. (2023). User Interface Experience Analysis of PMB Online Buddhi Dharma Using System Usability Scale. Bit-Tech (Binary Digital-Technology, 6(2), 216–222. https://doi.org/10.32877/bt.v6i2.1051

Liu, C., Pavlenko, A., Interlandi, M., & Haynes, B. (2025). Data Formats in Analytical DBMSs : Performance Trade-Offs And Future Directions. The VLDB Journal, 34(3), 1–23. https://doi.org/10.1007/s00778-025-00911-1

Maspupah, A. (2022). Literature Review: Advantages And Disadvantages Of Black Box And White Box Testing Methods. Techno Nusa Mandiri: Journal of Computing and Information Technology, 21(2), 151–162. https://doi.org/10.33480/techno.v21i2.5776

Meiliyani, K., Alfah, Awalia, N., & Setiadi, T. (2025). Penggunaan Ekspresi Regular dalam Meningkatkan Efisiensi Pencarian Produk pada Aplikasi E-Commerce. Neptunus: Jurnal Ilmu Komputer Dan Teknologi Informasi, 3(1), 169–177. https://doi.org/10.61132/neptunus.v3i1.698

Ramadhan, F. H., & Putro, H. P. (2020). Implementasi DataTables pada Proyek The Point Of Sale. AUTOMATA, 1(2), 20–44.

Saifudin, A., Mulyati, S., Sidi, R. G., Tanjung, R. F., Hermawan, I., & Ruziki, N. N. (2022). Pengujian Black Box pada Aplikasi Penjualan Toko Bunga Pelangi Berbasis Web Menggunakan Metode Equivalence Partitioning. Jurnal Informatika Universitas Pamulang, 7(1), 138–144. https://doi.org/10.32493/informatika.v7i1.175233HQJXMLDQ

Salih, Y., & Saefullah, R. (2024). Black Box Testing on Website-Based Guestbook Registration Applications. International Journal of Mathematics, Statistics, and Computing, 2(2), 44–49. https://doi.org/10.46336/ijmsc.v2i2.96

Salunke, S. V., & Ouda, A. (2024). A Performance Benchmark for the PostgreSQL and MySQL Databases. Future Internet. 16(10). https://doi.org/10.3390/fi16100382

Sarker, I. H. (2021). Data Science and Analytics: An Overview from Data-Driven Smart Computing, Decision-Making and Applications Perspective. SN Computer Science, 2(5), 1–22. https://doi.org/10.1007/s42979-021-00765-8

Sasidharan, R. (2022). Implementation of High Available and Scalable Syslog Server with NoSQL Cassandra Database and Message Queue. American Journal of Computer Architecture, 9(1), 1–7. https://doi.org/10.5923/j.ajca.20220901.01

Sedki, I., Hamou-lhadj, A., & Ait-mohamed, O. (2021). AWSOM-LP: An Effective Log Parsing Technique Using Pattern Recognition and Frequency Analysis. ArXiv, 1–13. https://doi.org/10.48550/arXiv.2110.15473

Sheeraz, M., Durad, M. H., Paracha, M. A., Mohsin, S. M., Kazmi, S. N., & Maple, C. (2024). Revolutionizing SIEM Security: An Innovative Correlation Engine Design for Multi-Layered Attack Detection. Sensors, 24(15), 1–22. https://doi.org/10.3390/s24154901

Supartini, R. (2023). Deteksi Serangan SQL Injection pada Website dengan Menggunakan Metode Reguler Expression. Progressive Information, Security, Computer, and Embedded System, 1(2), 107–114. https://doi.org/10.61255/pisces.v1i2.101

Teneke, N. G., Etemi, J. G., Kamak, Y. S., & Ariwa, R. N. (2024). Smart Library Automation: Integrating Classification Tree-Based cataloging with XAMPP Server Environment. ABUAD Journal of Engineering Research and Development (AJERD), 7(1), 328–339. https://doi.org/10.53982/ajerd.2024.0701.33-j

Yogi, Ruslianto, I., & Bahri, S. (2019). Analisa Log Web Server Untuk Mengetahui Pola Perilaku Pengunjung Website Menggunakan Teknik Regular Expressions. Coding Jurnal Komputer Dan Aplikasi, 7(01), 120–130. https://doi.org/10.26418/coding.v7i01.32692

Zhang, T., Qiu, H., Castellano, G., Rifai, M., Chen, C. S., & Pianese, F. (2023). System Log Parsing: A Survey. IEEE Transactions on Knowledge and Data Engineering, 35(8), 8596–8614. https://doi.org/10.1109/TKDE.2022.3222417