Log analysis and visualization tool

[paseaf]

Problem

Currently, each time we want to find some insight from the audit logs, we need to write SQL.
It's not fast, and does not directly provide visualization.

Goal

1. Visualization for log analysis
   Find a tool that provides interactive graphical query and visualization.
   It should also provide a web interface so we can later set up on the cloud and access from our local machines in real time

2. Visualization to reflect/replay attacker locations and attack steps

Possible steps

1. find out relevant tools
2. evaluate

Possible tools:

Apache Superset
https://superset.apache.org/

• looks promising but is dropping support for SQLite.
  We may have to use another DB.
  Unable to add a SQLite DB apache/superset#9748 (comment)

Note:
Can we get the password list they use by disabling user login?