DISTRIBUTED LOGGING APPARATUS SYSTEM AND METHOD

• US 20080276130A1
• Filed: 05/01/2007
• Published: 11/06/2008
• Est. Priority Date: 05/01/2007
• Status: Active Grant

• Current Assignee: X Corp. (f/k/a Twitter, Inc.) (X Holdings Corp.)
• Original Assignee: International Business Machines Corporation
• Inventors: Palazzolo, Aaron S., Tran, An T., Taylor, Michael L., Almoustafa, Ahmed M.
• Granted Patent: US 7,734,961 B2
• Time in Patent Office: Days
• US Class Current: 714/47
• CPC Class Codes: G06F 11/3476 Data logging G06F11/14, G06F11/2205 take precedence
• CPC Class Codes: H04L 41/069 using logs of notifications; Post-processing of notifications
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34

Abstract

An apparatus, system, and method are disclosed for distributed logging. Operating entities and associations between operating entities are registered in a registry by a logging entity registrar. An event notification monitor recognizes operating errors in operating entities. An aggregation module aggregates operating logs from sets of associated entities, which are then stored by a log set recorder.

Claims

1. A computer program product comprising a computer readable medium having computer usable program code executable to perform operations for distributed log collection, the operations comprising:

registering a plurality of logging entities;

defining logging entity associations for the plurality of logging entities;

receiving an error notification from a logging entity;

determining associated entities for the logging entity; and

collecting an activity log set comprising activity data for the logging entity and each associated logging entity.

2. The computer program product of claim 1, wherein defining logging entity associations comprises determining hierarchical relationships between logging entities.

3. The computer program product of claim 1, wherein determining associated entities comprises accessing a list of associated entities.

4. The computer program product of claim 1, wherein collecting an activity log set comprises collecting log entries from entities in an entity group.

5. The computer program product of claim 1, wherein the operations further comprise an operation to store the activity log set.

6. A system for distributed log collection, the system comprising:

a logging data store configured to store operating log data;

a log collector configured to collect operating log data from logging entities;

a logging entity monitor configured to monitor the operating status of logging entities;

a logging entity configured to log operating data; and

at least one associated entity.

7. The system of claim 6, further comprising a log aggregator.

8. The system of claim 7, wherein the logging data store is local to the log collector.

9. The system of claim 7, wherein the logging data store is external to the log collector.

10. The system of claim 7, wherein the logging collector is local to the logging entry monitor.

11. The system of claim 7, wherein the logging collector is external to the logging entry monitor.

12. An apparatus for distributed log collection, the apparatus comprising:

a logging entity registrar configured to register logging entities and logging entities associated with each logging entity;

a logging entity registry configured to identify the logging entities and logging entities associated with each logging entity;

a logging entity monitor configured to recognize operating error events in a logging entity.

13. The apparatus of claim 12, wherein the logging entity registry comprises at least one logging entity record, the logging entity record comprising a logging entity location, a log location, and an access protocol.

14. The apparatus of claim 13, wherein the logging entity monitor is configured to receive notification of operating error events.

15. The apparatus of claim 14, wherein the logging entity monitor is configured to identify operating error events in logging entities.