Event log correlation examines logs from many sources on the IT system and looks for similarities. This leads to the compilation of a report on a possible security breach as indicated by a series of events, which might seem harmless individually.