ANALYSIS OF CHAIN BASED INTEGRATED LOG CORRELATION ANALYSIS SYSTEM AND METHOD

摘要

PURPOSE: An integrated log associative relationship analysis system based on an analysis target and a method thereof are provided to extract high log data related to a specific log by analyzing heterogeneous logs by using an analysis chain. CONSTITUTION: A log storage unit(50) includes a log DB(DataBase) which stores collected logs and collected log information. A control unit(10) stores the log DB by collecting logs from the log storage unit according to the collected log information. The control unit displays a field name and a field value of the logs when a log associative analysis command is inputted. When the field name and the field value are selected, the control unit analyzes a chain corresponding to the selected filed name or filed value. The control unit includes a collected log setting unit(11), a log collecting unit(12), a normalization unit(13), and a relationship analysis unit(14). [Reference numerals] (11) Collected log setting unit; (12) Log collecting unit; (13) Normalization unit; (14) Relationship analysis unit; (20) Input unit; (30) Display unit; (40) Communication unit; (50) Storage unit; (51) Data storage unit; (52) Collected log setting DB; (53) Collected log DB; (54) Normalized log DB;