基于ELK组件的日志系统在地震行业中的应用  

Application of ELK component-based log system in the seismic industry

作　　者：边鹏飞[1] 郝丽 Bian Pengfei;Hao Li(Hebei Earthquake Agency,Hebei Shijiazhuang 050021,China)

机构地区：[1]河北省地震局,河北石家庄050021

出　　处：《地震科学进展》2023年第12期576-580,共5页Progress in Earthquake Sciences

摘　　要：网络设备、网络安全设备以及业务应用系统的日志在网络运维中是排除设备系统故障的一个重要数据资源。然而大量日志数据分散存储在不同的设备中,不便于查看和使用,难以满足网络运维中快速发现问题、定位问题和解决问题的要求。因此,为了提高业务人员的网络运维能力,建设一个统一的日志收集、存储、处理系统很有必要。本文介绍了一套以ELK开源组件搭建的日志系统,并在地震行业网中进行了实际应用,实现了地震行业网内业务系统、安全设备、网络设备等日志的实时收集、存储、处理和展示功能。对实现细节进行了详细阐述,为该架构的推广应用提供了典型示范。The logs of network devices,network security devices,and business application systems are an important data resource for troubleshooting equipment and system failures in network operations and maintenance.However,a large amount of log data is stored in different devices in a decentralized manner,which makes it difficult to view and use,and it is difficult to meet the requirements of quickly identifying,locating,and solving problems in network operation and maintenance.Therefore,in order to improve the network operation and maintenance capabilities of business personnel,it is necessary to build a unified log collection,storage,and processing system.This article introduces a log system built with ELK open source components,which has been applied in the earthquake industry network to achieve real-time collection,storage,processing,and display of logs from business systems,security devices,and network devices in the seismological industry network.The implementation details are elaborated in detail,providing a typical demonstration for the promotion and application of this architecture.

关 键 词：网络运维 ELK 日志系统 地震 

分 类 号：P315[天文地球—地震学]