EFFICIENT EVENT-TYPE-BASED DISTRIBUTED LOG-ANALYTICS SYSTEM

    公开(公告)号:US20210357397A1

    公开(公告)日:2021-11-18

    申请号:US16937708

    申请日:2020-07-24

    Applicant: VMWARE, INC.

    Abstract: The current document is directed to methods and systems that efficiently transmit and process log/event messages within and among distributed computer facilities. By digesting and condensing log/event messages at the message-collector level, the volume of data transmitted from message collectors to message-ingestion-and-processing systems is greatly reduced, which increases system efficiencies by decreasing network overheads and which provides sufficient additional computational bandwidth at the message-collector level to allow message collectors to offload many message-processing tasks from message-ingestion-and-processing system and other downstream processing systems. When the currently disclosed, improved message-collectors carry out message-processing tasks formerly carried out by message-ingestion-and-processing systems and other downstream processing systems, an even greater deduction in the volume of data transmitted from message collectors to message-ingestion-and-processing systems is obtained, further increasing system efficiencies. The decrease in data volume also contributes to increased message-query-processing efficiencies.

    METHODS AND SYSTEMS THAT SAMPLE LOG/EVENT MESSAGES IN A DISTRIBUTED LOG-ANALYTICS SYSTEM

    公开(公告)号:US20220121507A1

    公开(公告)日:2022-04-21

    申请号:US17143203

    申请日:2021-01-07

    Applicant: VMWARE, INC.

    Abstract: The current document is directed to methods and systems that sample log/event messages for downstream processing by log/event-message systems incorporated within distributed computer facilities. The data-collection, data-storage, and data-querying functionalities of log/event-message systems provide a basis for distributed log-analytics systems which, in turn, provide a basis for automated and semi-automated system-administration-and-management systems. By sampling log/event-messages, rather than processing and storing every log/event-message generated within a distributed computer system, a log/event-message system significantly decreases data-storage-capacity, computational-bandwidth, and networking-bandwidth overheads involved in processing and retaining large numbers of log/event messages that do not provide sufficient useful information to justify these costs. Increase in efficiencies of log/event-message systems obtained by sampling translate directly into increases in bandwidths of distributed computer systems, in general, and to increases in time periods during which useful log/event messages can be stored.

    METHODS AND SYSTEMS THAT RANK AND DISPLAY LOG/EVENT MESSAGES AND TRANSACTIONS

    公开(公告)号:US20220113938A1

    公开(公告)日:2022-04-14

    申请号:US17133479

    申请日:2020-12-23

    Applicant: VMWARE, INC.

    Abstract: Methods and systems that automatically rank log/event messages and log/event-message transactions to facilitate analysis of log/event-messages generated within distributed-computer systems are disclosed. A base-window dataset and current-window dataset are selected for diagnosis of a particular error or failure and processed to generate a transaction sequence for each dataset corresponding to log/event-message traces identified in the datasets. Then, frequencies of occurrence of log/event-message types relative to transaction types are generated for each dataset. From these two sets of relative frequencies of occurrence, changes in the relative frequency of occurrence for each log/event-message-type/transaction-type pair are generated. Normalized scores for log/event-message-type/transaction-type pairs and scores for transaction types are then generated from the changes in the relative frequency of occurrence. The generated scores reflect the relevance of log/event-messages in traces corresponding to particular transaction as well as the relevance of transaction types to the error or failure.

    METHODS AND SYSTEMS FOR AGGREGATING AND QUERYING LOG MESSAGES

    公开(公告)号:US20220197879A1

    公开(公告)日:2022-06-23

    申请号:US17174378

    申请日:2021-02-12

    Applicant: VMWARE, INC.

    Abstract: Methods and systems described herein are directed to aggregating and querying log messages. Methods and systems determine event types of log message generated by event sources of the distributed computing system. The event types are aggregated into aggregated records for a shortest time unit and event types are aggregated into aggregated records for longer time units based on the aggregated records associated with the shortest time unit. In response to a query regarding occurrences of an event type in a query time interval, the query time interval is split into subintervals with time lengths that range from the shortest time unit to a longest time unit that lie within the query time interval. The method determines a total event count of occurrences of the event type in the query time interval based on the aggregated records with time stamps in the subintervals. The event count in the query time interval may be used to detect abnormal behavior of the event sources.

    METHODS AND APPARATUS TO DETERMINE CONTAINER PRIORITIES IN VIRTUALIZED COMPUTING ENVIRONMENTS

    公开(公告)号:US20210288882A1

    公开(公告)日:2021-09-16

    申请号:US17332771

    申请日:2021-05-27

    Applicant: VMWARE, INC.

    Abstract: An example apparatus includes memory, and at least one processor to execute instructions to assign first containers to a first cluster and second containers to a second cluster based on the first containers including first allocated resources that satisfy a first threshold number of allocated resources and the second containers including second allocated resources that satisfy a second threshold number of allocated resources, determine a representative interaction count value for a first one of the first containers, the representative interaction count value based on a first network interaction metric corresponding to an interaction between the first one of the first containers and a combination of at least one of the first containers and at least one of the second containers, and generate a priority class for the first one of the first containers based on the representative interaction count value.

    PREDICTING APPLICATION RESPONSE TIME BASED ON METRICS

    公开(公告)号:US20180165584A1

    公开(公告)日:2018-06-14

    申请号:US15489764

    申请日:2017-04-18

    Applicant: VMWARE, INC.

    CPC classification number: G06N20/00 G06F11/00

    Abstract: The present disclosure is related to predicting application response lime based on metrics. An example machine-readable medium may store instructions executable by a processing resource to determine a particular response time and an average response time of an application based on a plurality of relevant performance metrics associated with the application during a first period of time, classify the particular response time into a group based on the average response time, and determine a relationship between the plurality of relevant performance metrics and the particular response time of the application. The example machine-readable medium may further store instructions executable by the processing resource to determine whether a response time of the application is likely to change sufficiently to change the classification to a different group during a second period of time based on the relationship.

    METHODS AND SYSTEMS THAT IDENTIFY COMPUTATIONAL-ENTITY TRANSACTIONS AND CORRESPONDING LOG/EVENT-MESSAGE TRACES FROM STREAMS AND/OR COLLECTIONS OF LOG/EVENT MESSAGES

    公开(公告)号:US20220066998A1

    公开(公告)日:2022-03-03

    申请号:US17096991

    申请日:2020-11-13

    Applicant: VMWARE, INC.

    Abstract: The current document is directed to methods and systems that automatically identify log/event-message traces and computational-entity transactions within collections and/or streams of log/event messages. Automated identification of log/event-message traces provides the basis for automated interpretation, by automated computer-system administration-and-the management subsystems, of the information represented by collections and/or streams of log/event messages. Disclosed approaches to automatically identifying log/event-message traces and computational-entity involve identifying log/event-message types, generating time-series-like log/event-message-type occurrence signals from log/event-message collections and/or streams, and computing cross correlations between pairs of log/event-message-type occurrence signals. In one implementation, a strongly-correlated-type graph is generated from the computed cross correlations, from which connected-components subgraphs, corresponding to computational-entity transactions, are extracted. Log/event-message traces are then extracted from acyclic graphs generated from the connected-component subgraphs.

Patent Agency Ranking