Network event capture and retention system

A method for processing log data from a plurality of log-producing devices which is stored as summarized log data in a plurality of log data analyzers, the method comprising:

• associating a database query with a certain log data analyzer;
• sending a database query from a management station to the certain log data analyzer;
• receiving in the management station a report from a database maintained by the certain log data analyzer;
• and, displaying the report on the management station.

A method for processing log data from a plurality of log-producing devices which is stored as summarized log data in a plurality of log data analyzers, the method comprising:

• associating a database query with certain of the plurality of log data analyzers;
• sending database queries from a management station to each of the certain log data analyzers;
• receiving in the management station a plurality of reports from databases maintained by the certain log data analyzers;
• merging the plurality of reports into a single report;
• and, displaying the merged report on the management station.

A data processing system for processing log data from a plurality of log-producing devices which comprises:

• a plurality of log data analyzers storing summarized log data;
• and, a management station connected to the plurality of log data analyzers via data communications links and which formulates database queries;
• sends database queries to a plurality of log data analyzers;
• receives a plurality of reports from the plurality of log data analyzers;
• and combines the plurality of reports into a single report.

A data processing system for processing log data from a plurality of log-producing devices which comprises:

• a plurality of log data analyzers storing summarized log data;
• and, a management station connected to the plurality of log data analyzers via data communications links and which associates a database query with a certain log data analyzer;
• sends a database query to the certain log data analyzer;
• receives a report from a database maintained by the certain log data analyzer;
• and, displays the report.

A data processing system for processing log data from a plurality of log-producing devices which comprises:

• a plurality of log data analyzers storing summarized log data;
• and, a management station in data communication with the plurality of log data analyzers and which associates a database query with certain of the plurality of log data analyzers;
• sends database queries to each of the certain log data analyzers;
• receives a plurality of reports from databases maintained by the certain log data analyzers;
• merges the plurality of reports into a single report;
• and, displays the merged report.