摘要： 根据目前的网络环境现状，提出了一个日志审计系统的设计，介绍了该系统的重要性以及它的作用，从总体上描述了系统的框架设计，同时对系统中大的功能模块进行了阐述，并利用伪代码给出了一些关键技术的实现细节，预见了日志审计系统在网络发展中的潜力。

关键词: 日志, 实时, 规则, 采集

Abstract: In terms of the situation of today’s network, this paper proposes a design of log audit system. The article introduces the importance and effect of this system, it describes the design of the system’s frame as a whole, depicts the big modules of the system, and gives some examples of the implementation of key technique by pseudocode, meanwhile predicts the potential of the log audit system in network.

Key words: Log, Real-time, Rule, Gather

中图分类号: 

• TP393.08