Design And Implementation Of Campus Network Log Analysis System Based On ELK

Campus Network is a broadband multimedia network which provides teaching,Scientific Research and comprehensive information service for many network users including staff,teachers and students.The campus network log analysis system is a powerful means to realize the campus network security protection work.Through the use of open source system architecture,administrators can modify the corresponding configuration parameters according to the operation of the campus network,the corresponding code is coded according to the requirement,so as to realize one-stop processing of storing,analyzing,mining and visualization of network log data,and assist daily network operation and maintenance.This paper uses ELK framework to design and build a campus network log analysis system,which can realize the multi-dimensional analysis of campus network log,so as to obtain valuable information,which can be used to guide the campus network security protection and maintenance,the main work has the following aspects:1.To achieve a large number of campus network security log reliable collection.In this paper,we use Logstash,a big data log collection tool,to collect and transfer the logs efficiently and reliably.2.Realize the pre-processing of massive campus network security log.Complete the format conversion of the original data,carry on the deep geographic information analysis to the access source IP address,help the system to understand the distribution of the access users more intuitively.3.Implement the storage of massive campus network security logs.Finally,the Elasticsearch cluster is set up,and according to the characteristics of different log data,it is transferred to Elasticsearch by collecting tool.4.Realize the visualization analysis of the massive campus network security log.Deploy the Kibana visualization tool to visualize the results of the system analysis.