面向多平台的日志远程采集系统研究

摘要

Log plays an important role in the system daily operation,audit and intrusion detection,and the mode of the remote centralized management is an effective means for log management. Because of the different log formats for different operation system,traditionally, it is difficult to gather the log of each system,and transmit them to remote log server in large-scale network. The nxlog is a multi-plat-form supported and powerful log collection tool,which can easily deploy to collect steadily the log on the target system,and send them to the remote log server with multiple log formats and transmission modes. Moreover,the Syslog as an industrial protocol has been supported by more and more systems. Therefore,based on nxlog and mature log server,the flexible and reliable remote log collection solution can be built easily. The actual operation result shows that this solution can effectively solve the problem of the remote system logs collection in large-scale network.%日志对于系统的日常运维、审计及入侵检测等具有重要作用,对日志进行远程集中化管理是日志管理的有效手段。由于不同操作系统平台上支持的日志格式不统一,传统上很难将大型网络中不同系统的日志远程采集到集中的日志服务器上。 nxlog是一种支持多平台的功能强大的日志采集工具,部署方便,可以在目标系统上持续稳定地收集系统日志,并支持以多种日志格式和传输模式将日志发送到远程日志服务器。同时,Syslog作为一种工业协议,也得到了越来越多的支持。基于nxlog并配合成熟的日志服务器可以构建灵活可靠的系统日志远程采集系统。实际运行结果表明该方案可有效解决大型网络中系统日志远程采集的问题。