As infrastructures and software grow in complexity the need to keep track of things becomes important. It is the job of log aggregation solutions to condense log data into a form that is easier to search, visualize, and analyze. There are many log aggregation solutions out there today with various pros and cons to fit the various types of data and architectures. This makes the choice of selecting a log aggregation solution an important one. This thesis analyzes two full-stack log aggregation solutions, Elastic stack and SigNoz, with the goal of evaluating how the ingestion and storage components of the two stacks perform with smaller and larger amounts of data. The evaluation of these solutions was done by ingesting log files of varying sizes into them while tracking their performance. These performance metrics were then analyzed to find similarities and differences. The thesis found that SigNoz featured a higher CPU usage on average, faster processing times, and lower memory usage. Elastic stack was found to do more processing and indexing on the data, requiring more memory and storage space to allow for more detailed searchability of the ingested data. This also meant that there was a larger storage space requirement for Elastic stack than SigNoz to store the ingested logs. The hope of this thesis is that these findings can be used to provide insight into the area and aid those choosing between the two solutions in making a more informed decision.

I detta examensarbete har tidsstämplar extraherats ur ett forensiskt perspektiv från ett hemautomationssystem med styrenheten Homey från Athom. Först konstruerades ett fiktivt händelsescenario gällande ett inbrott i en lägenhet med ett hemautomationssystem. Hemautomationssystemet bestod av flera perifera enheter som använde olika trådlösa nätverksprotokoll. Enheterna triggades under händelsescenariot. Därefter testades olika metoder för att få ut data i form av tidsstämplar. De metoder som testades var rest-API, UART och chip-off på flashminnet medan JTAG inte hanns med på grund av tidsbrist. Den metod som gav bäst resultat var rest-API:t som möjliggjorde extrahering av alla tidsstämplar samt information om alla enheter. I flashminnet hittades alla tidsstämplar, men det var inte möjligt att koppla ihop dessa tidsstämplar med en specifik enhet utan att använda information från rest-API:t. Trots att rest-API:t gav bäst resultat så var det den metod som krävde en mängd förutsättningar i form av bland annat inloggningsuppgifter eller en rootad mobil. Med hjälp av de extraherade tidsstämplarna rekonstruerades sedan händelsescenariot för inbrottet. / The purpose of this bachelor thesis was to extract timestamps from a home automation system with a control unit named Homey in a forensic perspective. The first step was to create a course of event regarding a burglar breaking into an apartment with home automation. The home automation system consisted of some peripheral units using different types of wireless network protocols. All these units were triggered during the break in. Thereafter different types of methods were tested in an attempt to extract the timestamps for each unit. These methods included rest-API, UART and chip-off on a flash memory. The method using JTAG were not tested due to lack of time. Rest-API was the method that provided most information about the units and time stamps. The flash memory also contained every timestamp, however it did not provide any information about which timestamp belonged to which unit. Even though the rest-API was the best method to extract data, it was also the method with most requirements such as credentials or a rooted smartphone. With the extracted timestamps it was possible to reconstruct the course of events of the break-in.

Magister Scientiae - MSc / Pressure drop within a field can be attributed to several factors. Pressure drop occurs when fractional forces cause resistance to flowing fluid through a porous medium. In this thesis, the sciences of petrophysics and rock physics were employed to develop understanding of the physical processes that occurs in reservoirs. This study focussed on the physical properties of rock and fluid in order to provide understanding of the system and the mechanism controlling its behaviour. The change in production capacity of wells E-M 1, 2, 3, 4&5 prompted further research to find out why the there will be pressure drop from the suits of wells and which well was contributing to the drop in production pressure. The E-M wells are located in the Bredasdorp Basin and the reservoirs have trapping mechanisms of stratigraphical and structural systems in a moderate to good quality turbidite channel sandstone. The basin is predominantly an elongated north-west and south-east inherited channel from the synrift sub basin and was open to relatively free marine circulation. By the southwest the basin is enclose by southern Outeniqua basin and the Indian oceans. Sedimentation into the Bredasdorp basin thus occurred predominantly down the axis of the basin with main input direction from the west. Five wells were studied E-M1, E-M2, E-M3, E-M4, and E-M5 to identify which well is susceptible to flow within this group. Setting criteria for discriminator the result generated four well as meeting the criteria except for E-M1. The failure of E-M1 reservoir well interval was in consonant with result showed by evaluation from the log, pressure and rock physics analyses for E-M1.iv Various methods in rock physics were used to identify sediments and their conditions and by applying inverse modelling (elastic impedance) the interval properties were better reflected. Also elastic impedance proved to be an economical and quicker method in describing the lithology and depositional environment in the absence of seismic trace.