基于ELK的BIND海量日志分析与用户行为态势感知研究  

ELK-based BIND Massive Log Analysis and User Behavior Situation Awareness Research

作　　者：阮晓龙[1] 路景鑫 RUAN Xiaolong;LU Jingxin(School of Information Technology,Henan University of Traditional Chinese Medicine,Zhengzhou 450046,China;Zhengzhou Tailai Information Technology Co.,Ltd.,Zhengzhou 450000,China)

机构地区：[1]河南中医药大学信息技术学院,河南郑州450046 [2]郑州泰来信息科技有限公司,河南郑州450000

出　　处：《软件工程》2020年第1期35-39,共5页Software Engineering

摘　　要：在互联网大规模应用的环境下,如何有效分析用户喜欢访问什么网站、在互联网上喜欢做什么、浏览什么是针对用户行为分析的重要内容。DNS作为一种域名解析服务,是互联网业务通信的重要保障,几乎所有互联网业务访问运行均离不开DNS的支持,所以本文通过对DNS海量日志进行收集、清洗、存储全流程处理过程,并结合以ELK为平台、以业务分析模型为基础,从而使DNS日志分析结果可视化清晰呈现,让用户了解互联网业务访问运行趋势,也直观表现出用户实际的访问情况,最终实现用户行为的态势感知。In the environment of large-scale application of Internet,how to effectively analyze what websites users like to visit,what they like to do on the Internet,and what websites users like to brows is an important content of user behavior analysis.DNS,as a domain name resolution service,is an important guarantee for Internet business communication.Almost all Internet business access and operation can not be separated from DNS support.Therefore,through the whole process of collection,cleaning and storage of DNS massive logs,combined with elk platform and business analysis model,this paper makes DNS log analysis results visible and clear.Let users understand the operational trend of Internet business access,and also intuitively show the actual access situation of users,and finally achieve the situation awareness of user behavior.

关 键 词：ELK BIND 日志分析 态势感知 

分 类 号：TP31[自动化与计算机技术—计算机软件与理论]