A log reading and writing method and device

Abstract

The embodiment of the invention provides a log reading and writing method and device. The method comprises the steps of acquiring a first log needing to be written into a first hard disk; Reading thelast piece of track information recorded in the log storage record table file to obtain a second hard disk which writes the log last time, the track information comprising the identifier of the hard disk which writes the log and the initial position information of the write-in log; Judging whether the second hard disk is the same as the first hard disk; And if the first log is different from the first log, writing the first log into a first hard disk, and writing the first initial position information and the identifier of the first hard disk as track information into a log storage record table file, the first initial position information representing the initial position of the first log. By applying the technical scheme provided by the embodiment of the invention, the integrity and continuity of the read logs are improved, the comprehensiveness of data analysis is improved, and the probability of making wrong strategy decisions is reduced.

Description

technical field [0001] The present application relates to the field of computer technology, in particular to a log reading and writing method and device. Background technique [0002] With the widespread deployment of application firewalls, the DPI (Deep Packet Inspection) series features of application firewalls provide application identification charts, application auditing, attack trend analysis URL (Uniform Resource Locator, uniform resource locator) access, log display, etc. The function provides users with good information reference and provides a good reference for the deployment of security policies. The provision of the above charts and other information is inseparable from the stored logs, that is, the above charts and other information are obtained by classifying and processing the logs. [0003] At present, when storing logs, in order to improve storage efficiency, the log daemon process (such as Log_Daemon) will store the logs on the hard disk of the business b...

AI Technical Summary

Problems solved by technology

In practical applications, due to various factors such as plugging and unplugging of business boards and power outages, the log daemon process often migrates from one business board to another, resulting in scattered logs stored in different logs.

When reading logs, only the logs stored on the hard disk of the service board where the log daemon process is currently located can be read, which leads to incomplete and discontinuous read logs, which in turn leads to incomplete data analysis and wrong policy decisions

Images