Log screen real-time visualization method and device

Abstract

The present invention discloses a log gathering screen real-time visualization method and device, wherein, the method includes: S1, acquiring log data; S2, screening out log index data from the log data, performing view mapping on the log index data to generate an initial log index situation Figure; S3, view configuration of the initial log indicator situation graph to obtain the optimized log indicator situation graph; S4, extract and reuse the optimized log indicator situation graph based on the file management mode to generate a log screen to display the log data situation. This method displays log data in real time in the form of visualized graphics and images, realizes the transformation of data into knowledge, provides faster insights into the hidden information in log data, and endows log data with higher value, which is beneficial for analysts to make accurate analysis and decision-making.

Description

Technical field [0001] The present invention relates to the field of data processing and data monitoring, and more particularly to a log aggregation screen real-time visualization method and apparatus. Background technique [0002] With the rapid development of information technology under the era of big data, network security and large data visual analysis becomes an emerging cross-section, with "technical driver" as the concept, combined with human cognitive power and machine data processing capabilities, Abstract, massive, complex, and multi-change data information is converted to an intuitive view, and provide labeling of key indicators to achieve a full range of network security. The log visualization is the most effective means of monitoring network security, and abstract networks and system logs are displayed in the way of graphic images, help analysts analyze network conditions, identify network abnormalities, intrusion, and predict network security event development tren...

AI Technical Summary

Problems solved by technology

[0006] However, in the existing real-time data display and query systems, sockets are used to create a two-way data channel between the browser and the server to achieve two-way data communication, realizing real real-time, but they all stay at the data acquisition stage, and the data visualization is synchronized However, the display stage is not involved or is not handled well, especially for special log data, which makes it difficult to intuitively judge the situation and analyze aggregated indicators after data acquisition

The value of log data is limited by real-time performance, and its value is limited by the real-time visualization of log data. However, the existing system does not provide a set of real-time data acquisition, data mapping, chart configuration, and real-time log data collection based on log data. A complete technical solution that integrates screens

Images