T 3.36 Misinterpretation of events

When using a management system, the respectively responsible system administrator is responsible for analysing and interpreting the messages of the management system in order to then initiate suitable safeguards. In general, the messages of the management system are based on monitoring mechanisms automatically searching through system logs of various types according to certain rules. In this, it is not easy to automatically detect anomalies indicating system errors in the profusion of log data generated and to then send the corresponding messages to the system administrator. In fact, errors can even remain undetected. For this reason, the incoming messages always need to be read and interpreted by the system administrator, since the messages (in case of an error) are based on the error symptoms and their (automatic) interpretation. A system administrator must also be able to recognise false alarms and incorrect error messages. If system messages are interpreted incorrectly by the administrator, then supposedly corrective countermeasures could even make the situation worse under some circumstances.