combines log collection (collected on the network or through an agent) and log analysis for: collection corelation analysing