公开(公告)号：US12086021B2

公开(公告)日：2024-09-10

申请号：US18299218

申请日：2023-04-12

申请人： Sumo Logic, Inc.

发明人： Udit Saxena ,  Reetika Roy ,  Ryley Higa ,  David M. Andrzejewski ,  Bashyam Tca

IPC分类号： G06F16/00 ,  G06F11/07 ,  G06F16/21 ,  G06F16/24 ,  G06F16/2455 ,  G06F16/25 ,  G06F16/35

CPC分类号： G06F11/0784 ,  G06F11/0775 ,  G06F11/0781 ,  G06F11/0787 ,  G06F16/211 ,  G06F16/24 ,  G06F16/24553 ,  G06F16/258 ,  G06F16/358

摘要： Clustering structured log data by key-values includes receiving, via a user interface, a request to apply an operator to cluster log messages according to values for keys associated with the request. At least a portion of each log message comprises structured machine data including a set of key-value pairs. The method further includes receiving a log message and determining whether to include the log message in a cluster based at least in part on an evaluation of values in the structured machine data of the log message for the keys associated with the request. The cluster is included in a set of clusters. Each cluster in the set is associated with a different combination of values for the keys associated with the request. The method further includes providing, via the user interface, information associated with the cluster.

公开(公告)号：US11663066B2

公开(公告)日：2023-05-30

申请号：US17009649

申请日：2020-09-01

申请人： Sumo Logic, Inc.

发明人： Udit Saxena ,  Reetika Roy ,  Ryley Higa ,  David M. Andrzejewski ,  Bashyam Tca

IPC分类号： G06F16/00 ,  G06F11/07 ,  G06F16/35 ,  G06F16/24 ,  G06F16/2455 ,  G06F16/21 ,  G06F16/25

CPC分类号： G06F11/0784 ,  G06F11/0775 ,  G06F11/0781 ,  G06F11/0787 ,  G06F16/211 ,  G06F16/24 ,  G06F16/24553 ,  G06F16/258 ,  G06F16/358

摘要： Clustering structured log data by key-values includes receiving, via a user interface, a request to apply an operator to cluster a set of raw log messages according to values for a set of keys associated with the request. At least a portion of each raw log message comprises structured machine data including a set of key-value pairs. It further includes receiving a raw log message in the set of raw log messages. It further includes determining whether to include the raw log message in a cluster based at least in part on an evaluation of values in the structured machine data of the raw log message for the set of keys associated with the request. The cluster is included in a plurality of clusters. Each cluster in the plurality is associated with a different combination of values for the set of keys associated with the request. It further includes providing, via the user interface, information associated with the cluster.

公开(公告)号：US12106658B2

公开(公告)日：2024-10-01

申请号：US18055568

申请日：2022-11-15

申请人： Sumo Logic, Inc.

发明人： David M. Andrzejewski ,  Bashyam Tca ,  Apoorv Garg ,  Ryley S K Higa ,  Naveen Ramachandrappa

IPC分类号： G08B26/00

CPC分类号： G08B26/008 ,  G08B26/003

摘要： Methods, systems, and computer programs are presented to generate response information for an alert. One method includes an operation for detecting an alert based on incoming log data or metric data and for calculating information for panels to be presented on a response-alert page. Calculating the information includes calculating first performance values for a period associated with the alert, calculating second performance values for a background period where the alert condition was not present, and calculating a difference between the first performance values and the second performance values. Further, the method includes an operation for selecting, based on the difference, relevant performance values for presentation in one of the panels. The response-alert page is presented with at least one of the panels based on the selected relevant performance values.

公开(公告)号：US11321158B2

公开(公告)日：2022-05-03

申请号：US17009643

申请日：2020-09-01

申请人： Sumo Logic, Inc.

发明人： Udit Saxena ,  Reetika Roy ,  Ryley Higa ,  David M. Andrzejewski ,  Bashyam Tca

IPC分类号： G06F11/07 ,  G06F16/35 ,  G06F16/24 ,  G06F16/2455 ,  G06F16/21 ,  G06F16/25

摘要： Clustering structured log data by key schema includes receiving a raw log message. At least a portion of the raw log message comprises structured machine data including a set of key-value pairs. It further includes receiving a map of keys to values. It further includes using the received map of keys to values to determine a key schema of the structured machine data. The key schema is associated with a corresponding cluster. It further includes associating the raw log message with the cluster corresponding to the determined key schema.