Linux系统下改进的日志采集模块

Improved Log Gathering Module Based on Linux

对传统的用户态模块ulog-acctd进行改进,提出了一种新的基于Linux的日志采集模块Aulog。Aulog模块对ulog-acctd的启动方式、参数配置、buffer设置、flush时间设置、字段裁剪五个方面进行改进,使其性能得到了很大的提高。从横向和纵向两个不同的角度进行的对比实验表明,Aulog的性能较ulogd和ulog-acctd分别提高1倍和10%;在相同网络环境下,Aulog的CPU消耗仅为ulogd的40%。

An improving log gathering module, named Aulog, is proposed based on Linux. In Aulog, the module of ulog-acctd is improved in five aspects: startup mode, parameter configuration, buffer sive, flush set-up, and cutting field. Experiments demonstrate that Aulog has better performance than ulogd and ulog-acctd: the throughput rate of Aulog is twice of ulogd and is about 10% higher than ulog-acctd; the CPU consumption in Aulog is only 40% of that in ulogd.