SYSTEM FOR ANALYZING AND MANAGING INTEGRATED LOG AND METHOD THEREOF

摘要

PURPOSE: A system for analyzing and managing an integrated log and a method thereof are provided to use one exclusive host as a sensing system with respect to infringements of an exterior and an interior, prevent an infringement accident of an insider, and to search a suspect by integrally managing logs. CONSTITUTION: At least one agent(100) locate in host systems and collect event systems generated in the host systems and log files created in operating systems being managed in each host system and transmit the event systems and the log files in accordance with the first protocol. A manager(110) constructs a database having a predetermined form based on information transmitted in accordance with the first protocol from the agents(100). A viewer(130) performs a communication using the manager(110) and the second protocol and manages the manager(110) and the agents(100) by searching information stored in the database in accordance with a user's selection, and analyzes and manages a system event and a log-in generated in the host system.