Identifying problematic messages
First Claim
1. A non-transitory machine-readable storage medium encoded with instructions executable by a hardware processor of a computing device for identifying problematic messages, the machine-readable storage medium comprising instructions to cause the hardware processor to:
- obtain log messages associated with a server request;
obtain a latency measure of the server request;
cluster each of the obtained log messages into one of a plurality of log clusters based on a measure of similarity between the obtained log message and other log messages included in the log cluster, wherein each of the log clusters includes a problematic counter indicating a total number of problematic messages in the log cluster and a benign counter indicating a total number of non-problematic messages in the log cluster;
compare the latency measure of the server request to a threshold;
increment the problematic counter in each of the log clusters if the latency measure exceeds the threshold or increment the benign counter in each of the log clusters if the latency measure does not exceed the threshold;
determine that one of the obtained log messages is a problematic log message based on a ratio of the problematic counter over the benign counter in the log cluster to which the problematic log message belongs; and
display the problematic log message as a notification of a potential problem.
7 Assignments
0 Petitions
Accused Products
Abstract
Examples relate to identifying problematic messages. In one example, a computing device may: obtain, for each of a plurality of server requests, at least one log message; obtain, for each of the server requests, a measure of server request success; for each of the obtained log messages, cluster the obtained log message into one of a plurality of log clusters, the clustering being based on a measure of similarity between the obtained log message and other log messages included in the log cluster; and for each of the obtained log messages, increment a particular counter associated with the log cluster into which the obtained log message is clustered, the particular counter being selected for incrementing based on the measure of server request success.
25 Citations
20 Claims
-
1. A non-transitory machine-readable storage medium encoded with instructions executable by a hardware processor of a computing device for identifying problematic messages, the machine-readable storage medium comprising instructions to cause the hardware processor to:
-
obtain log messages associated with a server request; obtain a latency measure of the server request; cluster each of the obtained log messages into one of a plurality of log clusters based on a measure of similarity between the obtained log message and other log messages included in the log cluster, wherein each of the log clusters includes a problematic counter indicating a total number of problematic messages in the log cluster and a benign counter indicating a total number of non-problematic messages in the log cluster; compare the latency measure of the server request to a threshold; increment the problematic counter in each of the log clusters if the latency measure exceeds the threshold or increment the benign counter in each of the log clusters if the latency measure does not exceed the threshold; determine that one of the obtained log messages is a problematic log message based on a ratio of the problematic counter over the benign counter in the log cluster to which the problematic log message belongs; and display the problematic log message as a notification of a potential problem. - View Dependent Claims (2, 3, 4, 5, 6)
-
-
7. A computing device comprising:
-
a hardware processor; and a data storage device storing instructions that, when executed by the hardware processor, cause the hardware processor to; receive a plurality of log messages associated with a server request; receive a latency measure of server request; identify, for each of the plurality of log messages, one of a plurality of log clusters to which the log message belongs, wherein each of the log clusters includes a problematic counter indicating a total number of problematic messages in the log cluster and a benign counter indicating a total number of non-problematic messages in the log cluster; compare the latency measure of the server request to a threshold; increment the problematic counter in each of the log clusters if the latency measure exceeds the threshold or increment the benign counter in each of the log clusters if the latency measure does not exceed the threshold; identify one of the identified log clusters as a problematic log cluster based on a ratio of the problematic counter over the benign counter in the problematic log cluster; and display the log message that belongs to the problematic log cluster as a problematic log message. - View Dependent Claims (8, 9, 10, 11, 12, 13, 14)
-
-
15. A method, implemented by a hardware processor, the method comprising:
-
receiving a plurality of log messages associated with a server request; receiving a latency measure of the server request; identifying, for each of the plurality of log messages, one of a plurality of log clusters to which the log message belongs, wherein each of the log clusters includes a problematic counter indicating a total number of problematic messages in the log cluster and a benign counter indicating a total number of non-problematic messages in the log cluster; comparing the latency measure of the server request to a threshold; incrementing the problematic counter in each of the log clusters if the latency measure exceeds the threshold or incrementing the benign counter in each of the log clusters if the latency measure does not exceed the threshold; determining that one of the plurality of log messages is a problematic log message based on a ratio of the problematic counter over the benign counter in the log cluster to which the problematic log message belongs; and displaying the problematic log message as a notification of a potential problem. - View Dependent Claims (16, 17, 18, 19, 20)
-
Specification