The invention discloses a method for establishing a safety management view of a full life cycle of unstructured data. The method comprises the following steps: 1, recording data operation behaviors of an unstructured data file in various stages, namely creation, storage, use, transmission, destruction and recovery, and storing the data operation behaviors as log audit records; 2, reading the log audit records of the unstructured data file in various stages, namely creation, storage, use, transmission, destruction and recovery, and analyzing the data operation behaviors contrary to a safety strategy to generate an analysis report; 3, establishing the safety management view of the full life cycle of the unstructured data. The method disclosed by the invention can be used for tracing the full life cycle (creation, storage, use, transmission, destruction and recovery) of big data, and obtaining the evidence of the behaviors contrary to the safety strategy, so that the safety burst time, such as data leakage can be traced to the source, and the data monitoring accuracy and the data monitoring real-time property are improved.