×

Log processing and analysis

  • US 10,642,712 B2
  • Filed: 10/23/2017
  • Issued: 05/05/2020
  • Est. Priority Date: 10/24/2016
  • Status: Active Grant
First Claim
Patent Images

1. A process comprising:

  • obtaining a log of execution of an executable program;

    parsing log messages contained in the log without prior knowledge of a structure of the log messages, wherein parsing a particular log message involves parsing the particular log message into an object identifier and one or more of a string constant and a non-identifier, the object identifier being one or more segments of the particular log message not parsed as a string constant or a non-identifier, the object identifier representative of one or more instances of programmatic elements in the executable program;

    identifying relationships among object identifiers of parsed log messages by inferring object types of objects represented by the object identifiers and identifying relationships among the object types of objects to obtain identified relationships, wherein an object type of the object identifier in the particular log message is inferred from a schema of the object identifier and the one or more of a string constant and a non-identifier in the particular log message;

    constructing a representation of the identified relationships; and

    outputting the representation, wherein the representation comprises a set of event timelines, each event timeline corresponding to an object, each event timeline depicting one or more nodes which each represent an event identified in a log message which contains the corresponding object, and wherein the event timelines are organized in nested hierarchical relationships corresponding to identified relationships of the corresponding object.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×