Log Collection and Analysis System

The system can collect multi-type and multi-manufacturer logs fast, format complicated logs, and solve the problems of numerous, scattered and heterogeneous formats of devices.

In addition, the system can reduce the occupation of hard disk space significantly based on efficient storage and compression, address log retention demands under big data scenarios, and comply with the provisions specified by relevant policies and laws.

The system is provided with the combined search of any character string, and the multi-condition interactive search result of ten-billion-level data can be returned in less than 10s, and the search result can be subject to correlation analysis automatically and used accordingly, with the distinctive display of the occurrence time of security incidents, access source, danger level and influencing range.

With built-in multi-dimensional data online analysis model, the system integrates several data display models, including global map, national map, topological graph, time shaft, etc., and can analyze and display the query result in real time, and reflect the system operating conditions intuitively.

By following multi-incident analysis and response strategy, and the security incident rules based on status analysis, the system can position network-wide security incidents comprehensively, find abnormal behaviors fast, and sound real-time alarms by email, short messages, SNMP, etc.

The system is preset with massive security analysis scenarios, and is also provided with all-dimensional, cross-equipment, fine-grained, and out-of-the-box correlation analysis capacity.