SYSTEM, METHOD, AND COMPUTER READABLE MEDIA FOR IDENTIFYING A USER-INITIATED LOG FILE RECORD IN A LOG FILE

• US 20120209882A1
• Filed: 04/26/2012
• Published: 08/16/2012
• Est. Priority Date: 04/25/2008
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated (Kyndryl Holdings, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Chen, Danny Yen-Fu, Cox, David A., Kinstler, Sheryl S., Morgan, Fabian F.
• Granted Patent: US 8,732,199 B2
• Time in Patent Office: Days
• US Class Current: 707/776
• CPC Class Codes: G06F 11/3476 Data logging G06F11/14, G06F11/2205 take precedence
• CPC Class Codes: G06F 16/162 Delete operations erasing in storage systems G06F3/0652
• CPC Class Codes: G06F 16/1748 De-duplication implemented within the file system, e.g. based on file segments de-duplication techniques in storage systems for the management of data blocks G06F3/0641
• CPC Class Codes: G06F 16/245 Query processing

Abstract

A system, a method, and a computer readable media for identifying a user-initiated log file record in a log file are provided. The log file has a user-initiated log file record and a repeating pattern of log file records automatically generated by a software program. The system allows a user to identify first and second timestamp values corresponding to first and second times which identify a time interval of interest in the log file. The system further analyzes the log file to identify the user-initiated log file record having a timestamp value between the first and second timestamp values. The system further identifies the repeating pattern of log file records in the log file.

Claims

1. A method for identifying log file records, the method comprising:

a computer identifying a first plurality of log file records in a log file, each log file record in the first plurality of log file records having been entered into the log file by a software program in response to an expiration of a predetermined time interval, the first plurality of log file records having at least a threshold level of similarity, the first plurality of log file records being a subset of a second plurality of log file records in the log file, the second plurality of log file records having been entered into the log file between a first time and a second time;

the computer extracting the first plurality of log file records from the second plurality of log file records;

the computer identifying at least one log file record remaining from the second plurality of log file records after the extracting, the at least one log file record corresponding to a command to perform at least one of a migrate task, an assign task, and a submit task.

2. The method of claim 1, further comprising the computer displaying the identified at least one log file record in a graphical user interface that is devoid of the first plurality of log file records.

3. The method of claim 1, further comprising the computer executing the command in response to a user selecting a button in a graphical user interface.

4. The method of claim 3, further comprising, before the executing, the computer storing a timestamp in a memory device in response to a user selecting a button in a graphical user interface, the timestamp comprising a value indicative of the first time.

5. The method of claim 3, further comprising, before the executing, the computer entering a marker into the log file in response to a user selecting a button in a graphical user interface and before the second plurality of log file records are entered into the log file.

6. The method of claim 3, further comprising, after the executing, the computer storing a timestamp in a memory device in response to a user selecting a button in a graphical user interface, the timestamp comprising a value indicative of the second time.

7. The method of claim 3, further comprising, after the executing, the computer entering a marker into the log file in response to a user selecting a button in a graphical user interface and after the second plurality of log file records are entered into the log file.

8. The method of claim 1, wherein the log file consists of log file records that each include a user identification.

9. The method of claim 1, wherein the log file consists of log file records that each include a transaction identification.

10. A computer readable storage medium having computer-executable instructions stored therein, said computer-executable instructions configured to be executed by a computer to implement a method for identifying log file records, the method comprising:

the computer identifying a first plurality of log file records in a log file, each log file record in the first plurality of log file records having been entered into the log file by a software program in response to an expiration of a predetermined time interval, the first plurality of log file records having at least a threshold level of similarity, the first plurality of log file records being a subset of a second plurality of log file records in the log file, the second plurality of log file records having been entered into the log file between a first time and a second time;

the computer extracting the first plurality of log file records from the second plurality of log file records;

the computer identifying at least one log file record remaining from the second plurality of log file records after the extracting, the at least one log file record corresponding to a command to perform at least one of a migrate task, an assign task, and a submit task.

11. The computer readable storage medium of claim 10, the method further comprising the computer displaying the identified at least one log file record in a graphical user interface that is devoid of the first plurality of log file records.

12. The computer readable storage medium of claim 10, the method further comprising the computer executing the command in response to a user selecting a button in a graphical user interface.

13. The computer readable storage medium of claim 12, the method further comprising, before the executing, the computer storing a timestamp in a memory device in response to a user selecting a button in a graphical user interface, the timestamp comprising a value indicative of the first time.

14. The computer readable storage medium of claim 12, the method further comprising, before the executing, the computer entering a marker into the log file in response to a user selecting a button in a graphical user interface and before the second plurality of log file records are entered into the log file.

15. The computer readable storage medium of claim 12, the method further comprising, after the executing, the computer storing a timestamp in a memory device in response to a user selecting a button in a graphical user interface, the timestamp comprising a value indicative of the second time.

16. The computer readable storage medium of claim 12, the method further comprising, after the executing, the computer entering a marker into the log file in response to a user selecting a button in a graphical user interface and after the second plurality of log file records are entered into the log file.

17. A system comprising a memory device and a computer operably coupled to the memory device, the memory device having a log file stored therein, the computer comprising a computer readable storage medium having computer-executable instructions stored therein, said computer-executable instructions configured to be executed by the computer to implement a method for identifying log file records, the method comprising:

the computer identifying a first plurality of log file records in the log file, each log file record in the first plurality of log file records having been entered into the log file by a software program in response to an expiration of a predetermined time interval, the first plurality of log file records having at least a threshold level of similarity, the first plurality of log file records being a subset of a second plurality of log file records in the log file, the second plurality of log file records having been entered into the log file between a first time and a second time;

the computer extracting the first plurality of log file records from the second plurality of log file records;

the computer identifying at least one log file record remaining from the second plurality of log file records after the extracting, the at least one log file record corresponding to a command to perform at least one of a migrate task, an assign task, and a submit task.

18. The system of claim 17, the method further comprising the computer displaying the identified at least one log file record in a graphical user interface that is devoid of the first plurality of log file records.

19. The system of claim 17, the method further comprising the computer executing the command in response to a user selecting a button in a graphical user interface.

20. The system of claim 17, the method further comprising, before the extracting, the computer displaying the second plurality of log file records in a graphical user interface and based on a predetermined log file record attribute.