Abstract: To discover the network cheating behavior in the online examination room in real time, a log data flow visualization method was proposed. The monitoring log data flow was used as the data source of the method. The candidates, the examination machine and other information were extracted according to the rules of the log. The correct candidate/machine corresponding relationship was established according to the first related log record information. The main information elements were mapped to the visual elements for each log data. All students' status and behavior were presented in the same visual result. A clear reminder will be achieved once there are cheating and other abnormal behavior. The experimental results show that the method is able to show the log data stream data in real time. The data processing method can adapt to real-time interaction.

Key words: data visualization, data stream visualization, log visualization, time series data, online examination