Abstract: A method and system for uniformly processing logs of multiple formats under a security situation awareness system. The method includes defining a universal interface file and an interface file that corresponds to each device ID of each vendor; collecting log files of respective vendors; putting a file transfer protocol into the collected log files and the defined universal interface file; reading, when change of any log file is monitored, the log file line by line, and updating the log file through the file transfer protocol; identifying a corresponding device ID; screening out an interface file corresponding to the device ID; based on the screened interface file, converting the updated log file into an interpretable uniform format in terms of the universal interface file; and displaying graphically a log file resulted from the uniform format, and completing a uniform processing with respect to the logs of multiple formats.