Rsyslog在IT日志采集中的应用  

The usage of rsyslog in log collection

作　　者：林峰旭 刘金扬 郑剑 翟宜凯 Lin Fengxu;Liu Jinyang;Zheng Jian;Zhai Yikai(Informatization Office of Beihang University, Beijing 100083)

机构地区：[1]北京航空航天大学信息化办公室

出　　处：《网络空间安全》2019年第4期18-22,共5页Cyberspace Security

摘　　要：随着我国互联网发展,网络安全问题日益严重。校园网出口防火墙、网络行为审计等系统在运行过程中产生海量IT日志,这些日志对高校安全管理有着重要意义。但是,校园网IT日志种类繁多、数量巨大,给采集发送工作带来很大困难。文章对校园网IT日志采集的难点进行了分析,应用Rsyslog到校园网IT日志采集,以较低的运行成本和对现有应用最小的影响,解决日志的采集和转发问题。With the rapid development of Internet in China, the Increasingly serious problem of network security has attracted broad attention of people. A huge number of logs are generated in the process of running such systems as firewalls and network behavior audit equipment. These logs are of great significance to the safety management of universities, while they also bring enormous difficulties to the collection and transmission of logs because of their rich variety and huge quantity. In this paper, we analyze the difficulties in the collection of logs in campus network and apply the tool rsyslog to log processing. With lower operating cost and minimal impact on existing applications, the tool is used to solve the collecting and forwarding problems.

关 键 词：SYSLOG Rsyslog 日志转发 日志提取 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]