1. A computer-implemented method of determining a classification of a log message generated by one or more platforms of a data system, comprising the steps of: receiving, at a log agent, a log message from the one or more platforms of the data system; parsing an identifier out of the log message; attempting to match the identifier to a known classification that represents a type of device or process responsible for generating the log message; assigning the classification to the log message responsive to a successful match during the attempting; and transmitting to a log manager, a request for information related to a known classification for the identifier responsive to an unsuccessful match during the attempting; and responsive to receiving a failed known classification message from the log manager; creating a new classification; and assigning the identifier to the new classification.