AUTOMATIC ANALYSIS OF LOG ENTRIES THROUGH USE OF CLUSTERING
First Claim
Patent Images
1. A method in a computerized environment, said method comprising:
- obtaining a training set of log entries, wherein the log entries describing an operation of a system, wherein the log entries comprise at least one log entry which is indicative of a non-erroneous operation of the system;
automatically determining an approximated matching function between a log entry and an at least one cluster based on the training set of the log entries, wherein said automatically determining the approximated matching function is performed using a machine learning process;
obtaining a set of log entries describing operation of the system;
associating the set of log entries with the at least one cluster, based on the approximated matching function; and
providing an indication referring to the at least one cluster associated with the first portion of the log entries and the second portion of the log entries.
1 Assignment
0 Petitions
Accused Products
Abstract
A set of log entries is automatically inspected to determine a bug. A training set is utilized to determine clustering of log identifications. Log entries are examined in real-time or retroactively and matched to clusters. Timeframe may also be matched to a cluster based on log entries associated with the timeframe. Error indications may be outputted to a user of the system in respect to a log entry or a timeframe.
-
Citations
18 Claims
-
1. A method in a computerized environment, said method comprising:
-
obtaining a training set of log entries, wherein the log entries describing an operation of a system, wherein the log entries comprise at least one log entry which is indicative of a non-erroneous operation of the system; automatically determining an approximated matching function between a log entry and an at least one cluster based on the training set of the log entries, wherein said automatically determining the approximated matching function is performed using a machine learning process; obtaining a set of log entries describing operation of the system; associating the set of log entries with the at least one cluster, based on the approximated matching function; and providing an indication referring to the at least one cluster associated with the first portion of the log entries and the second portion of the log entries. - View Dependent Claims (2, 3, 4, 5, 6)
-
-
7. A computerized apparatus, the apparatus comprising a hardware processor which is arranged to:
-
obtain a training set of log entries, wherein the log entries describing an operation of a system, wherein the log entries comprise at least one log entry which is indicative of a non-erroneous operation of the system; automatically determine an approximated matching function between a log entry and an at least one cluster based on the training set of the log entries, wherein said automatically determining the approximated matching function is performed using a machine learning process; obtain a set of log entries describing operation of the system; associate the set of log entries with the at least one cluster, based on the approximated matching function; and provide an indication referring to the at least one cluster associated with the first portion of the log entries and the second portion of the log entries. - View Dependent Claims (8, 9, 10, 11, 12)
-
-
13. A computer program product, said computer program product comprising a non-transitory computer readable medium, in which computer instructions are stored, which instructions, when read by a computer, cause the computer to:
-
obtain a training set of log entries, wherein the log entries describing an operation of a system, wherein the log entries comprise at least one log entry which is indicative of a non-erroneous operation of the system; automatically determine an approximated matching function between a log entry and an at least one cluster based on the training set of the log entries, wherein said automatically determining the approximated matching function is performed using a machine learning process; obtain a set of log entries describing operation of the system; associate the set of log entries with the at least one cluster, based on the approximated matching function; and provide an indication referring to the at least one cluster associated with the first portion of the log entries and the second portion of the log entries. - View Dependent Claims (14, 15, 16, 17, 18)
-
Specification