The function will use the following three components:
1) Dataset Activity
If Total number of datasets tracked = N
Total audit log messages = M
Audit log messages for dataset 1 = m1
Then the Truth Value for component 1 only is:
log10 (m1/M - 100/N + 50) / log10 (150)2) Number of unique programs reading from a dataset
3) Time since the last read
Sample Output:
Dataset | % of Audit Log Message | Score |
---|---|---|
DS1 | 70 | 85 |
DS2 | 30 | 68 |
...
Dataset | % of Audit Log Message | Score |
---|---|---|
DS1 | 40 | 85 |
DS2 | 32 | 83 |
DS3 | 15 | 77 |
DS4 | 7 | 73 |
DS5 | 3 | 71 |
DS6 | 3 | 71 |
2) Number of unique programs reading from a dataset
...