Management of log data
First Claim
1. A method for processing log data, the method comprising:
- with one or more computing devices comprising computer hardware,receiving a log data file comprising one or more log lines, the log lines including information relating to one or more computing operations;
processing a first log line of the one or more log lines to identify a first variable portion of the first log line;
extracting a first static portion of the first log line;
extracting the first variable portion from the first log line;
determining a first value for the first log line by using a hash function configured to generate a value based on the extracted first static portion;
processing a second log line of the one or more log lines to identify a second variable portion of the second log line;
extracting the second variable portion from the second log line;
extracting a second static portion of the second log line;
determining a second value for the second log line by using a hash function configured to generate a value based on the extracted second static portion;
comparing the first and second values;
based on the comparison, if the first and second values match, grouping the first and second log lines together;
comparing the first and second variable portions; and
modifying the static portions of the first and second log lines if the first variable portion matches the second variable portion.
2 Assignments
0 Petitions
Accused Products
Abstract
A system according to certain aspects improves the process of managing log data. The system may receive a log data file including one or more log lines that contain information relating to computing operations. At least some of the log lines may include a static portion and a variable portion. The system may process a first log line to identify and extract a static portion from the first log line, and determine a first value for the first log line based on the extracted static portion. The system may process a second log line to identify and extract a static portion from the second log line, and determine a second value for the second log line based on the extracted static portion. The system may compare the first and second values, and based on the comparison, organize the first and second log lines together for presentation to a user.
149 Citations
18 Claims
-
1. A method for processing log data, the method comprising:
- with one or more computing devices comprising computer hardware,
receiving a log data file comprising one or more log lines, the log lines including information relating to one or more computing operations; processing a first log line of the one or more log lines to identify a first variable portion of the first log line; extracting a first static portion of the first log line; extracting the first variable portion from the first log line; determining a first value for the first log line by using a hash function configured to generate a value based on the extracted first static portion; processing a second log line of the one or more log lines to identify a second variable portion of the second log line; extracting the second variable portion from the second log line; extracting a second static portion of the second log line; determining a second value for the second log line by using a hash function configured to generate a value based on the extracted second static portion; comparing the first and second values; based on the comparison, if the first and second values match, grouping the first and second log lines together; comparing the first and second variable portions; and modifying the static portions of the first and second log lines if the first variable portion matches the second variable portion. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
- with one or more computing devices comprising computer hardware,
-
10. A system for processing log data, the system comprising:
-
a computing device comprising computer hardware and configured to; receive a log data file comprising one or more log lines, the log lines including information relating to one or more computing operations, wherein at least some of the log lines include a variable portion and a static portion; process a first log line of the one or more log lines to identify a first variable portion of the first log line; extract the first variable portion from the first log line; extract a first static portion from the first log line; determine a first value for the first log line by using a hash function configured to generate a value based on the extracted first static portion; process a second log line of the one or more log lines to identify a second variable portion of the second log line; extract the second variable portion from the second log line; extract a second static portion from the second log line; determine a second value for the second log line by using a hash function configured to generate a value based on the extracted second static portion; compare the first and second values; based on the comparison, if the first and second values match, group the first and second log lines together for presentation to a user; compare the first and second variable portions; and modify the static portions of the first and second log lines if the first variable portion matches the second variable portion. - View Dependent Claims (11, 12, 13, 14, 15, 16, 17, 18)
-
Specification