Method and apparatus for dynamic configurable logging of activities in a distributed computing system

• US 20020198983A1
• Filed: 06/26/2001
• Published: 12/26/2002
• Est. Priority Date: 06/26/2001
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Ullmann, Lorin Evan, Shah, Rajeeta Lalji
• Granted Patent: US 7,120,685 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/0751 Error or fault detection not based on redundancy power supply failures G06F1/30; network fault management H04L41/06
• CPC Class Codes: G06F 11/3006 where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems multiprogramming arrangements G06F9/46; allocation of resources G06F9/50
• CPC Class Codes: G06F 11/3072 where the reporting involves data filtering, e.g. pattern matching, time or event triggered, adaptive or policy-based reporting
• CPC Class Codes: G06F 11/3093 Configuration details thereof, e.g. installation, enabling, spatial arrangement of the probes

Abstract

A system and method for implementing tracking of computing system activities wherein the tracking can be dynamically adjusted. The system provides a multiple level logging system having a first level for detecting message level errors and a second trace level for obtaining trace information and for filtering same to provide more details to be used for implementing corrective action. A set of filters is provide to further refine the data which is provided to a user/system administrator. The system also provides for selective activation of tracking and logging for selected subsystems, as well as the ability to vary the frequency at which the tracking is performed. The frequency of logging can be adjusted upward in response to detection of a error and can then be decreased, or the tracking selectively disabled or entirely stopped upon detection of a stop event.

Claims

1. A method for providing variable frequency logging of activities in a distributed computing system comprising the steps of:

detecting an event trigger;

responsive to the event trigger, activating a temporary logging function for logging system activities;

logging system activities; and

terminating logging of system activities based on detection of a stop event.

2. The method of claim 1 wherein said activating further comprises implementing filtering of said logging of system activities.

3. The method of claim 1 wherein said event trigger comprises an error message.

4. The method of claim 1 wherein said activating comprises altering the amount of logging done for system activities.

5. The method of claim 4 wherein said altering comprises adjusting the frequency at which logging is done on an affected subsystem at an affected location.

6. The method of claim 1 wherein said activating comprises starting logging at an affected subsystem.

7. The method of claim 6 wherein said activating comprises identifying the subsystem affected by said event and starting logging at said affected subsystem.

8. The method of claim 7 further comprising determining the identity of at least one additional subsystem affected by the event and starting logging at said at least one additional subsystem.

9. The method of claim 1 further comprising determining what subsystems have been affected by said event and wherein said activating comprises starting logging at all affected subsystems.

10. The method of claim 1 further comprising the step of accessing at least one configuration database for predefined temporary logging information.

11. The method of claim 7 further comprising the step of accessing at least one configuration database to obtain predefined temporary logging information for said subsystem.

13. The apparatus of claim 12 wherein said event trigger detection component comprises a component for monitoring error messages in said system.

14. The apparatus of claim 12 wherein said stop event detection component comprises a timer for terminating logging after a preset time period.

15. The apparatus of claim 12 wherein said stop event detection component comprises a component for receiving user input of stop notification.

16. The apparatus of claim 12 further comprising a mapping component for determining the location from which the trigger event emanated.

17. The apparatus of claim 16 wherein said mapping component is further adapted to determine the subsystem at which the trigger event occurred.

18. The apparatus of claim 17 wherein said mapping component is additionally adapted to identify at least one additional subsystem affected by said trigger event.

19. The apparatus of claim 17 wherein said logging activator activates logging at each of said at least one additional subsystem.

20. The apparatus of claim 12 wherein said logging activator comprises means to alter the frequency at which the logging of system activities is done.

12. Apparatus for providing variable frequency logging of activities in a distributed computing system comprising:

an event trigger detection component for detecting at least one predefined trigger event;

a plurality of logging components for logging system activities at a system location;

a logging activator responsive to input from the event trigger detection component, for activating at least one of said plurality of logging components to log system activities; and

a stop event detection component for terminating logging of system activities based on detection of a stop event.

21. A program storage device readable by machine tangibly embodying a program of instructions executable by the machine to perform a method for providing variable frequency logging of activities in a distributed computing system, said method comprising the steps of:

detecting an event trigger;

responsive to the event trigger, activating a temporary logging function for logging system activities;

logging system activities; and

terminating logging of system activities based on detection of a stop event.