System, Method, and Computer Readable Media for Identifying a User-Initiated Log File Record in a Log File

• US 20090271448A1
• Filed: 04/25/2008
• Published: 10/29/2009
• Est. Priority Date: 04/25/2008
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated (Kyndryl Holdings, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Cox, David A., Chen, Danny Yen-Fu, Morgan, Fabian F., Kinstler, Sheryl S.
• Granted Patent: US 8,219,582 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 11/3476 Data logging G06F11/14, G06F11/2205 take precedence
• CPC Class Codes: G06F 16/162 Delete operations erasing in storage systems G06F3/0652
• CPC Class Codes: G06F 16/1748 De-duplication implemented within the file system, e.g. based on file segments de-duplication techniques in storage systems for the management of data blocks G06F3/0641
• CPC Class Codes: G06F 16/245 Query processing

Abstract

A system, a method, and a computer readable media for identifying a user-initiated log file record in a log file are provided. The log file has a user-initiated log file record and a repeating pattern of log file records automatically generated by a software program. The system allows a user to identify first and second timestamp values corresponding to first and second times which identify a time interval of interest in the log file. The system further analyzes the log file to identify the user-initiated log file record having a timestamp value between the first and second timestamp values. The system further identifies the repeating pattern of log file records in the log file.

Claims

1. A method for identifying a user-initiated log file record in a log file, comprising:

selecting the log file having a plurality of log file records therein, the plurality of log file records having at least in part a repeating pattern of log file records automatically generated by a software program;

executing a first software command to store a first timestamp value in a memory device, the first timestamp value indicating a first time;

executing at least a first user-initiated software command that induces a computer to store at least a first log file record having a second time stamp value in the log file, the second timestamp value indicating a second time after the first time;

executing a second software command to store a third timestamp value in the memory device, the third timestamp value indicating a third time, the third time being after the second time and after execution of the first user-initiated software command is completed;

analyzing the plurality of log file records in the log file to identify the repeating pattern of log file records stored therein;

extracting the repeating pattern of log file records from the plurality of commands to identify the first log file record having the second timestamp value that was generated between the first and third times; and

storing the first log file record associated with the first user-initiated software command in the memory device.

2. The method of claim 1, wherein analyzing the plurality of log file records in the log file to identify the repeating pattern of log file records is performed before executing the first software command to store the first timestamp value.

3. The method of claim 1, wherein analyzing the plurality of log file records in the log file to identify the repeating pattern of log file records is performed after executing the second software command to store the third timestamp value.

4. The method of claim 1, further comprising displaying a graphical user interface on a display device, the graphical user interface configured to allow a user to identify the log file having the plurality of log file records therein.

5. The method of claim 1, further comprising displaying the plurality of log file records in a graphical user interface on a display device.

6. The method of claim 1, further comprising displaying the first log file record associated with the first user-initiated software command in a graphical user interface on a display device.

7. A system for identifying a user-initiated log file record in a log file, comprising:

a memory device having the log file stored therein, the log file having a plurality of log file records therein, the plurality of log file records having at least in part a repeating pattern of log file records;

a computer operably communicating with the memory device, the computer configured to display first and second graphical user interfaces on a display device, the first graphical user interface configured to allow a user to select the log file;

the first graphical user interface further configured to allow the user to execute a first software command to store a first timestamp value in the memory device, the first timestamp value indicating a first time;

the second graphical user interface configured to allow the user to execute at least a first user-initiated software command that induces the computer to store at least a first log file record having a second time stamp value in the log file, the second timestamp value indicating a second time after the first time;

the first graphical user interface further configured to allow the user to execute a second software command to store a third timestamp value in the memory device, the third timestamp value indicating a third time, the third time being after the second time and after execution of the first user-initiated software command is completed;

the computer further configured to analyze the plurality of log file records in the log file to identify the repeating pattern of log file records stored therein;

the computer further configured to extract the repeating pattern of log file records from the plurality of commands to identify the first log file record having the second timestamp value that was generated between the first and third times; and

the computer further configured to store the first log file record associated with the first user-initiated software command in the memory device.

8. The system of claim 7, wherein the computer is further configured to analyze the plurality of log file records in the log file to identify the repeating pattern of log file records before executing the first software command to store the first timestamp value.

9. The system of claim 7, wherein the computer is further configured to analyze the plurality of log file records in the log file to identify the repeating pattern of log file records after executing the second software command to store the third timestamp value.

10. The system of claim 7, wherein the first graphical user interface displays the plurality of log file records in the log file.

11. The system of claim 7, wherein the computer is further configured to display a third graphical user interface on the display device, the third graphical user interface configured to display the first log file record associated with the first user-initiated software command therein.

12. One or more computer readable media having computer-executable instructions implementing a method for identifying a user-initiated log file record in a log file, the method comprising:

selecting the log file having a plurality of log file records therein, the plurality of log file records having at least in part a repeating pattern of log file records automatically generated by a software program;

executing a first software command to store a first timestamp value in a memory device, the first timestamp value indicating a first time;

executing at least a first user-initiated software command that induces a computer to store at least a first log file record having a second time stamp value in the log file, the second timestamp value indicating a second time after the first time;

executing a second software command to store a third timestamp value in the memory device, the third timestamp value indicating a third time, the third time being after the second time and after execution of the first user-initiated software command is completed;

analyzing the plurality of log file records in the log file to identify the repeating pattern of log file records stored therein;

extracting the repeating pattern of log file records from the plurality of commands to identify the first log file record having the second timestamp value that was generated between the first and third times; and

storing the first log file record associated with the first user-initiated software command in the memory device.

13. The one or more computer readable media of claim 12, wherein analyzing the plurality of log file records in the log file to identify the repeating pattern of log file records is performed before executing the first software command to store the first timestamp value.

14. The one or more computer readable media of claim 12, wherein analyzing the plurality of log file records in the log file to identify the repeating pattern of log file records is performed after executing the second software command to store the third timestamp value.

15. The one or more computer readable media of claim 12, wherein the method further comprises displaying a graphical user interface on a display device, the graphical user interface configured to allow a user to identify the log file having the plurality of log file records therein.

16. The one or more computer readable media of claim 12, wherein the method further comprises displaying the plurality of log file records in a graphical user interface on a display device.

17. The one or more computer readable media of claim 12, wherein the method further comprises displaying the first log file record associated with the first user-initiated software command in a graphical user interface on a display device.