Automating Security Log Analysis | Dataford Interview Questions

Write a script to automate the analysis of security logs.

Implement analyze_security_logs(logs, threshold), where logs is a list of dictionaries containing timestamp, source_ip, and event. Count events whose event is "AUTH_FAILURE", return only source IPs meeting the threshold, and sort results by failed-attempt count descending, then IP ascending. Return a list of dictionaries with source_ip and failed_attempts.

Constraints

0 <= len(logs) <= 5000
Each log contains valid timestamp, source_ip, and event fields
The event field is either AUTH_FAILURE or another event name
1 <= threshold <= 5000
Source IP addresses are non-empty strings

Function Signature

def analyze_security_logs(logs, threshold):

Your question is Automating Security Log Analysis. Start with the requirements in the Question tab.

Run and submit as often as you like. When you're ready, talk me through your approach or go straight to the code.

Problem

Write a script to automate the analysis of security logs.

Constraints

0 <= len(logs) <= 5000
Each log contains valid timestamp, source_ip, and event fields
The event field is either AUTH_FAILURE or another event name
1 <= threshold <= 5000
Source IP addresses are non-empty strings

Function Signature

def analyze_security_logs(logs, threshold):

Your question is Automating Security Log Analysis. Start with the requirements in the Question tab.

Run and submit as often as you like. When you're ready, talk me through your approach or go straight to the code.