UTILIZING LOG EVENT ONTOLOGY TO DELIVER USER ROLE SPECIFIC SOLUTIONS FOR PROBLEM DETERMINATION

• US 20120036397A1
• Filed: 08/04/2010
• Published: 02/09/2012
• Est. Priority Date: 08/04/2010
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: BALANI, NAVEEN G., SINGH, RAMKISHOR
• Granted Patent: US 8,468,391 B2
• Time in Patent Office: Days
• US Class Current: 714/38.11
• CPC Class Codes: G06F 11/079 Root cause analysis, i.e. error or fault diagnosis in a hardware test environment G06F11/22; in a software test environment G06F11/36

Abstract

A log event can be received from a log source within an application server environment. The log event can be an error message which is associated with a log level. In one embodiment, the application server environment can be a JAVA 2 ENTERPRISE EDITION runtime environment. The log event can be analyzed to determine the ontology of the log event which can comprise of the log event, the user context, and the relationship of the log event to the user context. The log event can be associated with the user context as determined by the relationship of the log event.

Claims

1. A method for analyzing log events comprising:

receiving a log event from a log source within an application server environment, wherein the log event is an error message, wherein the log event is associated with a log level;

analyzing the log event to determine the ontology of the log event, wherein the ontology of the log event comprises of at least one log event, a user context, and the relationship of the at least one log event to the user context; and

associating the log event with the user context as determined by the relationship of the log event.

2. The method of claim 1, wherein the receiving, analyzing, and associating is performed in real-time from the log source.

3. The method of claim 1, further comprising:

presenting a related log event based on a specified user context when the at least one log event is selected, wherein the related log event is semantically linked to the at least one log event.

4. The method of claim 3, wherein the specified user context is at least one of automatically determined based on authentication credentials.

5. The method of claim 1, further comprising:

inferring a solution for an error associated with the at least one log event utilizing semantics of the at least one log event, the log level, and the related log event; and

presenting the solution to a user based on a user role, wherein the solution is user role specific.

6. The method of claim 1, wherein the solution is automatically incorporated to an ontology base knowledge base, wherein the knowledge base is an informational format conforming to at least one of a frequently asked question (FAQ), a how-to, a tutorial, a Wiki, and a flowchart.

7. The method of claim 1, further comprising:

presenting content associated with an ontology based knowledge base, wherein the content comprises of the at least a log event, a solution procedure, and a Uniform Resource Locator identifying related content.

8. The method of claim 1, wherein the user context is determined semantically by at least one of a log source and a portion of the log content.

9. The method of claim 1, wherein the associating utilizes at least one of a Resource Description Framework (RDF) and a Extensible Markup Language.

10. A system for analyzing log events comprising:

a ontology data model comprising of at least one log event, one user context, and a relationship between the at least one log event and the one user context;

an event analyzer configured to analyze the at least one log event from a log source within an application server environment;

an ontology engine able to construct and determine the ontology of the at least on log event, from the ontology data model; and

an inference engine configured to generate inference results based on the ontology of the at least one log event.

11. The system of claim 10, wherein the at least one log event comprises of Semantic Hypertext Markup Language (HTML) markup.

12. The system of claim 10, wherein the log source is a remotely communicative application logging server.

13. The system of claim 10, wherein the event analyzer presents a log record comprising of the at least one log event and a plurality of related log events, wherein the plurality of related log events is semantically determined from the ontology data model.

14. The system of claim 10, wherein the inference results are conveyed to an ontology repository.

15. The system of claim 10, wherein the inference results of the inference represent an inferred solution for an error associated with the at least one log event, wherein the inferred solution is provided in real-time responsive to an occurrence of the at least one log event, and wherein the inference engine generates different solutions for the same log event dependent upon a user role of a system user, each of the different solutions representing a user role specific solution.

16. The system of claim 10, further comprising:

mapping a log level associated with a log event to the at least one log event within the ontology data model.

17. The system of claim 10, further comprising:

a filter permitting a plurality of event logs to be presented responsive to at least one of a username and a user role selection.

18. The system of claim 10, wherein the application server environment is a JAVA 2 ENTERPRISE EDITION runtime environment.

19. An apparatus including an interface for error provisioning comprising:

display hardware within with an interface window is displayed;

a tangible memory storing at least one computer program product;

a processor operable to execute the computer program product to cause the interface window to be displayed by the display hardware;

a first portion of the interface window for specifying a log source, wherein the log source is at least one of a log file and an application component; and

a second portion of the interface window for assigning a user context to at least one of a plurality of error messages automatically determined based on user specified ontology criteria, wherein the error messages are selected from the log source.

20. The apparatus of claim 19, further comprising:

a interface window for presenting an inferred solution associated with the user context of the at least one of a plurality of error messages, wherein the inferred solution is user modifiable.