A Study of Service Availability Monitoring Based on SIEM System

• Main Authors: ZONG-XIAN WANG, 汪宗賢
• Other Authors: none
• Format: Others
• Language: zh-TW
• Published: 2019
• Online Access: http://ndltd.ncl.edu.tw/handle/6fb65n

碩士 === 大同大學 === 資訊工程學系(所) === 107 === The network devices and servers produce logs as they performed their services. Analyzing these logs can monitor the operation of the services and provide critical information to managers in the event of anomalies. However, due to the type and variety of log formats, it will take a lot of time to gather to get useful information. To solve this problem, it is common to use a log collection and analysis system to centrally manage all logs. The monitored system automatically transfers the logs to the host where the log collection system is located. Therefore, in this study, we used Splunk to construct a system to integrate all logs, and to monitor the survival and performance of the service by analyzing the logs of the system and services. Managers can view these logs through the interface we developed and can check the operation of multiple systems in near real time.