read writeup here: https://blog.hackeriet.no/solution-to-seccon-2017-log-search/

Original writeup (https://blog.hackeriet.no/solution-to-seccon-2017-log-search/).