A network analysis and management system includes a processor coupled to a communications interface and a non-transitory memory. The processor is configured to read instructions from the non-transitory memory to cause the system to perform operations comprising receiving log data associated with communication between a first user device and a network using a first protocol stack including a plurality of layers. A plurality of network events are generated based on the log data. Each network event is associated with a respective log data entry of the log data and a respective layer of the plurality of layers. First network analysis information is generated by correlating first and second network events using a correlation configuration associated with a network management task. A network management message is generated using the first network analysis information, and transmitted to one of the first user device and the network for performing the network management task.