Method and System for Correlated Tracing with Automated Multi-Layer Function Instrumentation Localization
    71.
    发明申请
    Method and System for Correlated Tracing with Automated Multi-Layer Function Instrumentation Localization 有权
    相关跟踪与自动多层功能仪器定位的方法与系统

    公开(公告)号:US20130290936A1

    公开(公告)日:2013-10-31

    申请号:US13873610

    申请日:2013-04-30

    CPC classification number: G06F11/3636 G06F11/3604

    Abstract: A system for automatically instrumenting and tracing an application program and related software components achieves a correlated tracing of the program execution. It includes tracing of endpoints that are the set of functions in the program execution path that the developers are interested. The tracing endpoints and related events become the total set of functions to be traced in the program (called instrument points). This invention automatically analyzes the program and generates such instrumentation points to enable correlated tracing. The generated set of instrumentation points addresses common questions that developers ask when they use monitoring tools.

    Abstract translation: 用于自动测试和跟踪应用程序和相关软件组件的系统实现了程序执行的相关跟踪。 它包括跟踪开发人员感兴趣的程序执行路径中的一组函数的端点。 跟踪终点和相关事件成为程序中要追踪的功能的总数(称为仪器点)。 本发明自动分析程序并生成这样的仪器点以实现相关跟踪。 生成的仪器仪表组解决了开发人员在使用监控工具时所要求的常见问题。

    Log-based system maintenance and management

    公开(公告)号:US11194692B2

    公开(公告)日:2021-12-07

    申请号:US16037354

    申请日:2018-07-17

    Abstract: Methods and systems for system maintenance include identifying patterns in heterogeneous logs. Predictive features are extracted from a set of input logs based on the identified patterns. It is determined that the predictive features indicate a future system failure using a first model. A second model is trained, based on a target sample from the predictive features and based on weights associated with a distance between the target sample and a set of samples from the predictive features, to identify one or more parameters of the second model associated with the future system failure. A system maintenance action is performed in accordance with the identified one or more parameters.

    Content-level anomaly detector for systems with limited memory

    公开(公告)号:US10740212B2

    公开(公告)日:2020-08-11

    申请号:US15970398

    申请日:2018-05-03

    Abstract: Systems and methods for implementing content-level anomaly detection for devices having limited memory are provided. At least one log content model is generated based on training log content of training logs obtained from one or more sources associated with the computer system. The at least one log content model is transformed into at least one modified log content model to limit memory usage. Anomaly detection is performed for testing log content of testing logs obtained from one or more sources associated with the computer system based on the at least one modified log content model. In response to the anomaly detection identifying one or more anomalies associated with the testing log content, the one or more anomalies are output.

    Structure-level anomaly detection for unstructured logs

    公开(公告)号:US10740170B2

    公开(公告)日:2020-08-11

    申请号:US15830579

    申请日:2017-12-04

    Abstract: A computer-implemented method, computer program product, and computer processing system are provided. The method includes preprocessing, by a processor, a set of heterogeneous logs by splitting each of the logs into tokens to obtain preprocessed logs. Each of the logs in the set is associated with a timestamp and textual content in one or more fields. The method further includes generating, by the processor, a set of regular expressions from the preprocessed logs. The method also includes performing, by the processor, an unsupervised parsing operation by applying the regular expressions to the preprocessed logs to obtain a set of parsed logs and a set of unparsed logs, if any. The method additionally includes storing, by the processor, the set of parsed logs in a log analytics database and the set of unparsed logs in a debugging database.

    Periodicity analysis on heterogeneous logs

    公开(公告)号:US10679135B2

    公开(公告)日:2020-06-09

    申请号:US15340255

    申请日:2016-11-01

    Abstract: Systems and methods are disclosed for detecting periodic event behaviors from machine generated logging by: capturing heterogeneous log messages, each log message including a time stamp and text content with one or more fields; recognizing log formats from log messages; transforming the text content into a set of time series data, one time series for each log format; during a training phase, analyzing the set of time series data and building a category model for each periodic event type in heterogeneous logs; and during live operation, applying the category model to a stream of time series data from live heterogeneous log messages and generating a flag on a time series data point violating the category model and generating an alarm report for the corresponding log message.

    LOG-BASED COMPUTER FAILURE DIAGNOSIS
    78.
    发明申请

    公开(公告)号:US20190179691A1

    公开(公告)日:2019-06-13

    申请号:US16207851

    申请日:2018-12-03

    Abstract: Methods and systems for system failure diagnosis and correction include extracting syntactic patterns from a plurality of logs with heterogeneous formats. The syntactic patterns are clustered according to categories of system failure. A single semantically unique pattern is extracted for each category of system failure. The semantically unique patterns are matched to recent log information to detect a corresponding system failure. A corrective action us performed responsive to the detected system failure.

    Automatic discovery of message ordering invariants in heterogeneous logs

    公开(公告)号:US10296844B2

    公开(公告)日:2019-05-21

    申请号:US14846093

    申请日:2015-09-04

    Abstract: A method and system are provided. The method includes performing, by a logs-to-time-series converter, a logs-to-time-series conversion by transforming a plurality of heterogeneous logs into a set of time series. Each of the heterogeneous logs includes a time stamp and text portion with one or more fields. The method further includes performing, by a time-series-to-sequential-pattern converter, a time-series-to-sequential-pattern conversion by mining invariant relationships between the set of time series, and discovering sequential message patterns and association rules in the plurality of heterogeneous logs using the invariant relationships. The method also includes executing, by a processor, a set of log management applications, based on the sequential message patterns and the association rules.

Patent Agency Ranking