With the development of the Internet

the network security risks are increasing day by day. IDS

as the main intrusion detection method in the mobile service network

existing the problems of the large amount of log

high misinformation rate

low excavation depth and lack of alarm correlation. Therefore the application effect is not good in the whole company

and can not play the purpose of real-time detection. Based on the P2 DR model

the IDS strategy is optimized

the IDS warning is filtered and aggregated

and the real-time alarm process is establishmented. This paper based on P2 DR idea to achieve massive IDS alarm filtering and real-time dispatching

effectively solve the problem of IDS event alarm

and realize the real-time requirements of alarm.