Topsec Log Collection and Analysis System

The system can efficiently and comprehensively collect, process, compress, store, and analyze alerts from various log data types, including network devices, security devices, operating systems, middleware, databases, and business systems. It ensures complete log retention, supports centralized log aggregation, and meets regulatory mandates for log retention (e.g., storing logs for over six months).

The system features low resource consumption and high processing performance, with industry-leading data collection and processing capabilities. Based on a self-developed non-relational data storage solution, it can significantly improve log data compression efficiency, ensure full-scale log data collection and storage in scenarios involving large volumes of data, and support long-term retention, while effectively reducing hardware resource costs.

The system fully supports both IPv6 and IPv4 dual protocol stacks, as well as various application environments including domestic alternatives. It handles centralized log management through the complete process of log collection, log normalization, data storage, statistical analysis, and data backup and recovery. This assists clients in addressing issues such as dispersed logs, heterogeneous formats, and large volumes of logs in their networks, thereby enhancing log management capabilities.

The system offers a comprehensive set of log retrieval and statistical analysis methods, integrating global maps, log analysis models, timelines, and various other data visualization modes. It provides an intuitive representation of system operational status, capable of supporting log volumes at the scale of tens of billions, with query results returned within seconds. This assists operations personnel in quickly analyzing and troubleshooting faults, as well as conducting forensic analysis of security incidents.