OBJECTIVE

Bring several supplied log formats into one consistent event model.

TIME PLAN

Prepare 20m · Build 110m · Verify 30m · Document 20m

Working boundary

Work only inside the folder created by Smartphone-Academy.py prepare log-normalization. Use the supplied samples or systems you personally administer.

Prepare the Termux workspace

Open Termux in the Academy root and prepare this lab with the local companion. It creates safe samples, notes and evidence files under your Termux account.

Android + Termuxpython Smartphone-Academy.py prepare log-normalizationNo root. Use the supplied files and keep the workspace under $HOME.

Practical mission

  1. Define mandatory and optional event fields
  2. Parse three formats while preserving raw text
  3. Convert times and severity labels consistently
  4. Report coverage and every record that could not be normalized
EVIDENCE TO PRODUCE

A normalized event file with source provenance and parsing statistics.

Quality gate

The deliverable states a clear scope and date for Normalize Heterogeneous Logs.
A second learner can reproduce the commands and paths.
Original samples remain unchanged and verifiable.
Limitations are recorded beside the conclusions.

Analyst reflection

Which result from “Report coverage and every record that could not be normalized” would need more evidence before it could support an operational decision?

Complete in Termux

After checking the evidence, run python Smartphone-Academy.py complete log-normalization. Progress is stored locally in the Termux home directory.

14 · Defensive Monitoring

Continue learning

Back to Smartphone Academy