10. A network security device for monitoring traffic through a computer network comprising: a system log module configured to generate a system log entry responsive to an event, error or misconfiguration, or combinations thereof in the computer network; a processor configured to automatically generate a rule for handling the event, error or misconfiguration in the network based on data contained in the system log entry, wherein the rule identifies a corrective action to be implemented by the network security device to modify an existing behavior of the network security device that caused the event, error or misconfiguration, or combination thereof associated with the system log entry; a lookup table for associating a format with the system log entry, wherein the format provides a context for the data contained in the system log entry based on positioning of the data within the system log entry; a parser configured to extract the data from the system log entry and communicate the data to the processor, wherein the parser is further configured to parse the system log entry according to the format to identify the data contained in the system log entry; a causal database comprising relationship data associating the data parsable from the system log entry with a cause of the event, error or misconfiguration, or combinations thereof wherein the cause is associated with the rule; and a rule module comprising a plurality of rule templates, wherein the rule module is configured to select a rule template based on the format, the cause and data and to use the rule template to automatically generate a new rule to modify the existing behavior of the network security device in response to a condition and to take a corrective action based on the new rule when the condition next occurs.
12. The network security device of claim 10 , wherein the rule corresponds to the context of the data.