基于关联规则的日志分析系统的研究与设计

Research and Design of Log Analysis System Based on Association Rule

日志文件作为系统和网络用户行为的记录管理工具,对保护系统安全,方便调查系统故障,监控系统运行状况起着极其重要的作用。该文提出了一个基于关联规则的日志分析系统,将数据挖掘技术运用在日志分析中,并针对挖掘的数据特点对Apriori算法进行了改进。日志分析系统可以利用关联规则对日志进行分析获取其中所蕴含的重要信息。

As a primary record-keeper of operating system and network users' activities,logs are greatly important for protecting system security, investigating the failure of system,and monitoring the usage status of system.The paper introduces a log analysis system on association rule,putting data mining into log analysis and improving the Apriori algorithm.This log analysis system can use mining algorithm of association rule to find implicative useful information.