Any research on log correlation and aggregation?

["ricci" <ricci () cs ust hk>]

Hello All,

I'm read some research paper about log correlation and aggregation of
various logging facilities such as syslog, IDS and Firewall logs. Is there
any research on correlation and aggregation? Is there any research on log
aggregation through timestamp and any research on time synchronization? Is
there any mechanism for correlating and aggregating logs which do not have
time synchronization?

Thx.

Ricci