The invention provides a log management method and device in a distributed environment. The log management method in the distributed environment comprises the steps of intercepting and collecting log data, sending the log data, receiving the log data, carrying out analysis and handling on the centralized log data, storing the handled log data in a database, and providing the log data for a user so that the user can carry out query and statistics. When the log management method and device in the distributed environment are used, logs which are arranged at various physical storage positions in a scattered mode can be collected to a centralized log center in real time, log records in log files can be sequenced according to a unified time line sequence, and can be structurally stored, and the better functions of log query, log analysis and log statistics are provided. According to the log management method and device in the distributed environment, various problems, caused by inconformity of the time and the space of logs generated by applications when distribution, clustering and deployment are carried out, in the process of log utilization are solved, and query and statistics of the user are facilitated.