Topic Modeling



No file uploaded.Loading data...
Model loaded successfully.
KMeans model fitted successfully.

First 10 Keywords:
['root', 'user', 'login']

Nearest keyword to cluster centroid:
('login', 0.5161214099556245)
('login', 2.086258152022635)
('login', 2.1774590725557346)
('root', 1.7331337989819688)
('root', 1.0988895520362978)

Top TF-IDF scores on each cluster:
Cluster 0:
(root,5.00) (closed,1.41) (session,1.41) (check,1.15) (pass,1.15) (unknown,1.15) (eventtemplate,1.00)
Cluster 1:
(opened,0.71) (session,0.71) (abnormally,0.58) (alert,0.58) (exited,0.58) (authentication,0.33) (euid,0.33) (failure,0.33) (logname,0.33) (nodevssh,0.33)
Cluster 2:
(check,0.58) (pass,0.58) (unknown,0.58) (authentication,0.32) (euid,0.32) (failure,0.32) (logname,0.32) (nodevssh,0.32) (rhost,0.32) (root,0.32)
Cluster 3:
(opened,0.71) (session,0.71)
Cluster 4:
(user,1.03) (root,0.79) (check,0.53) (pass,0.53) (unknown,0.53)

Nearest keyword to comment:
('EventTemplate', 'login', 0.04433252)
('authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=<*>', 'root', 1.3332399)
('check pass; user unknown', 'login', 1.4115602)
('authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=<*>', 'root', 1.3332399)
('authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=<*> user=root', 'root', 1.1515723)
('authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=<*> user=root', 'root', 1.1515723)
('authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=<*> user=root', 'root', 1.1515723)
('authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=<*> user=root', 'root', 1.1515723)
('authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=<*> user=root', 'root', 1.1515723)
('authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser= rhost=<*> user=root', 'root', 1.1515723)