A violation log processing method, device and computer-readable storage medium

Abstract

The application discloses a violation log processing method, including: extracting the violation log set from the communication component, and storing the violation log set in the first cache; performing horizontal segmentation processing on the violation log set in the first cache, to obtain For each violation log information, respectively store each violation log information in the corresponding second cache; determine the corresponding message processing thread according to the violation log information in the second cache; manage each message processing thread, so as to concurrently process the second cache Violation log information is processed. It can be seen that this application greatly improves the log processing efficiency by adopting two-level cache and multi-thread concurrent processing, avoids the problems of message blockage and message delay processing when a large number of logs are concurrently processed, and provides convenience for users to analyze security violation logs in a timely manner. Improved user experience. The present application also provides a violation log processing device, electronic equipment, and a computer-readable storage medium, all of which have the above beneficial effects.

Description

technical field [0001] The present application relates to the technical field of violation log processing, and in particular to a method, device, electronic device, and computer-readable storage medium for processing violation logs. Background technique [0002] In scenarios such as rail transit and power grids, the security of various hosts is of paramount importance. It is usually necessary to install an operating system security enhancement system, and a large number of security violation logs will be generated during the process of protecting host security. In this scenario, the number of hosts is usually several thousand, and one is deployed on the centralized management platform. [0003] However, when a host encounters a virus attack, a large number of violation logs will continue to be generated. The violation logs are blocked on the communication components, and the centralized management platform cannot handle them in time, resulting in delays in the analysis of t...

AI Technical Summary

Problems solved by technology

[0003] However, when the host encounters a virus attack, a large number of violation logs will continue to be generated. The violation logs are blocked on the communication components, and the centralized management platform cannot handle them in time, resulting in delays in the analysis of the violation logs.

Images