A system aggregating and analysing log data from across an IT environment in real time, detecting and alerting on potential security threats.