公开(公告)号：US20080319940A1

公开(公告)日：2008-12-25

申请号：US11874161

申请日：2007-10-17

Applicant: Sachin Garg ,  Navjot Singh ,  Shalini Yajnik ,  Ranjith Vasireddy ,  Sridhar Vasireddy

Inventor： Sachin Garg ,  Navjot Singh ,  Shalini Yajnik ,  Ranjith Vasireddy ,  Sridhar Vasireddy

IPC: G06F17/30

CPC classification number: H04L12/66

Abstract: A technique is disclosed that enables the run-time behavior of a data-processing system to be analyzed and, in many cases, to be predicted. In particular, the illustrative embodiment of the present invention comprises i) transforming the messages that constitute an unstructured log into a numerical series and ii) applying a time-series analysis on the resultant series for the purpose of pattern detection. Indeed, it is recognized in the illustrative embodiment that the problem really is to detect patterns that depict aspects of system behavior, regardless of the textual content of the individual log messages. In other words, by analyzing the totality of the messages in the log or logs—as opposed to looking for pre-defined patterns of the individual messages—system behavior can be mapped and understood. The mapping helps in characterizing the system for the purposes of predicting failure, determining the time required to reach stability during failure recovery, and so forth.

Abstract translation: 公开了一种能够分析数据处理系统的运行时行为并且在许多情况下被预测的技术。 特别地，本发明的说明性实施例包括：i）将构成非结构化日志的消息变换为数字序列，以及ii）为了模式检测的目的，对所得到的序列应用时间序列分析。 实际上，在说明性实施例中认识到，问题确实是检测描绘系统行为方面的模式，而不管各个日志消息的文本内容如何。 换句话说，通过分析日志或日志中的消息的总体，而不是寻找单个消息的预定义模式，可以映射和理解系统行为。 映射有助于表征系统的目的是为了预测故障，确定在故障恢复期间达到稳定所需的时间等等。

公开(公告)号：US08073806B2

公开(公告)日：2011-12-06

申请号：US11874161

申请日：2007-10-17

Applicant: Sachin Garg ,  Navjot Singh ,  Shalini Yajnik ,  Ranjith Vasireddy ,  Sridhar Vasireddy, legal representative

Inventor： Sachin Garg ,  Navjot Singh ,  Shalini Yajnik ,  Ranjith Vasireddy

IPC: G06F15/00 ,  G06F15/18

CPC classification number: H04L12/66

Abstract: A technique is disclosed that enables the run-time behavior of a data-processing system to be analyzed and, in many cases, to be predicted. In particular, the illustrative embodiment of the present invention comprises i) transforming the messages that constitute an unstructured log into a numerical series and ii) applying a time-series analysis on the resultant series for the purpose of pattern detection. Indeed, it is recognized in the illustrative embodiment that the problem really is to detect patterns that depict aspects of system behavior, regardless of the textual content of the individual log messages. In other words, by analyzing the totality of the messages in the log or logs—as opposed to looking for pre-defined patterns of the individual messages—system behavior can be mapped and understood. The mapping helps in characterizing the system for the purposes of predicting failure, determining the time required to reach stability during failure recovery, and so forth.

Abstract translation: 公开了一种能够分析数据处理系统的运行时行为并且在许多情况下被预测的技术。 特别地，本发明的说明性实施例包括：i）将构成非结构化日志的消息变换为数字序列，以及ii）为了模式检测的目的，对所得到的序列应用时间序列分析。 实际上，在说明性实施例中认识到，问题确实是检测描绘系统行为方面的模式，而不管各个日志消息的文本内容如何。 换句话说，通过分析日志或日志中的消息的总体，而不是寻找单个消息的预定义模式，可以映射和理解系统行为。 映射有助于表征系统的目的是为了预测故障，确定在故障恢复期间达到稳定所需的时间等等。