Method and system for real-time collection of log data from distributed network components

• US 20070124437A1
• Filed: 11/30/2005
• Published: 05/31/2007
• Est. Priority Date: 11/30/2005
• Status: Abandoned Application

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Chervets, Steven
• Application Number:
  US11/290,350
• Publication Number:
  US 20070124437A1
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0681 Configuration of triggering conditions
• CPC Class Codes: H04L 41/069 using logs of notifications; Post-processing of notifications

Abstract

Methods and systems for collecting log data from one or more components distributed in a network are described. In one example, a method may include providing a server with a persistent storage device such as a disk drive and the server may be in communication with the one or more components in the network. Log data may be collected at the components and an error from a first component may be reported to the server. In response thereto, log data related to the error may be requested from other components and communicated to the server. The components may each maintain log data locally and either report the occurrence of errors that occur at the component or component'"'"'s node, or respond to requests from the server for data related to errors or events that occurred at other nodes. Accordingly, the server may maintain a real-time collection of error log data.

Claims

1. A method for collecting log data from one or more components distributed in the network, the method comprising:

receiving a report of an error and log data related to the error from a first component of said one or more components of the network; and

in response to said report, requesting, from the other of said one or more components, log data related to the error, wherein the requesting includes specifying an event key related to the error.

2. The method of claim 1, wherein the one or more components include one or more Voice-over-IP telephones.

3. The method of claim 1, wherein the log data is indexed with one or more event keys.

4. The method of claim 1, wherein the requesting operation includes specifying an event key related to the error.

5. The method of claim 1, wherein the server receives a selected portion of the log data.

6. The method of claim 1, further comprising:

providing a communication interface from the server to third parties, said interface for reporting alarm conditions.

7. The method of claim 6, further comprising:

reporting the alarm conditions based on the error.

8. The method of claim 1, which comprises storing the log data related to the error in a persistent storage device.

9. A machine-readable medium embodying instructions which, when executed by a machine, cause the machine to perform the method of claim 1.

10. In a component attached to a network having a server and other components connected thereto, a method for collecting and reporting log data to the server, the method comprising:

registering with the server;

collecting log data at the component and indexing the log data using one or more event keys; and

reporting to the server an error from the component, wherein the reporting operation reports log data related to the error and reports an event key.

11. The method of claim 10, wherein the collecting operation utilizes a circular buffer.

12. The method of claim 10, wherein the collecting operation compresses the log data.

13. The method of claim 10, wherein the component includes one or more Voice-over-IP telephones.

14. The method of claim 10, wherein the colleting includes indexing the log data with one or more event keys.

15. The method of claim 10, wherein the reporting specifies an event key related to the error.

16. A machine-readable medium embodying instructions which, when executed by a machine, cause the machine to perform the method of claim 10.

17. A system to collect log data from one or more components distributed in the network, the system comprising:

means for receiving a report of an error and log data related to the error from a first component of said one or more components of the network; and

means for requesting, from the other of said one or more components and in response to said report, log data related to the error, wherein the requesting includes specifying an event key related to the error.

18. A component for collecting and reporting log data to the server, the component comprising:

means for registering with a server in a network;

means for collecting log data at the component and indexing the log data using one or more event keys; and

means for reporting to the server an error from the component, wherein the reporting operation reports log data related to the error and reports an event key.