Study Of Network Event Management Based On Event Correlation

Network Event Correlator is the software to filter the Events in all kinds of log files. It enables us to check out the key fault problems in advance and complicated stations. As such, it is a perfect analyze way to solve the security and fault problems in Internet. This paper describes how to organize the filtering rule library for the events. Also it introduces the principles and technologies of how to implement a Network Event filter based on VC. And this paper made some research on the architecture of the distributed system. In the system, some advanced software development technique, such as plugins and multithreading and distribution, is adopted, which brings brief and powerful extended abilities and high performance. Especially, the plugin SEC and rule-based event correlation made system can run stably on complex events in various stations. SEC can communicate with these log files automatically to accomplish the high-load filter task.