摘要： With the development of information system and the increasing of system complexity, information security system is more and more complex and important, and it produces massive logs .The traditional log audit system has been unable to effectively complete