Apparatus and Method for Graphically Displaying Transaction Logs
First Claim
Patent Images
1. A computer-implemented method comprising:
- obtaining, by a processing circuit, a log file comprising a plurality of log entries from a memory circuit, wherein each log entry is identified by a corresponding line number;
generating, by the processing circuit, a list that maps the line number of each log entry to a corresponding pattern of log entries, wherein each corresponding pattern of log entries is identified by a pattern number and represents a task performed by the computing device;
computing, by the processing circuit, a pattern value for each pattern in the list;
detecting, by the processing circuit, an anomalous pattern in the list; and
outputting, by the processing circuit, an interactive graph to a display device, wherein the interactive graph plots the pattern value for a pattern in the list to the line number of a representative log entry in that pattern, and visually indicates the anomalous pattern to the user.
1 Assignment
0 Petitions
Accused Products
Abstract
A computing device obtains and analyzes the log entries of a log file, and generates an interactive graph that visually represents the results of the analysis to output to a display device. More particularly, the device groups each log entry in the log file into a corresponding pattern, and then generates the graph to plot the line numbers of the log entries to their corresponding patterns. The plot is formed as a wave to make it easy for a user to identify patterns of commands and actions that are executed in the performance of a given task, as well as for determining whether an underlying system is exhibiting anomalous behavior.
-
Citations
19 Claims
-
1. A computer-implemented method comprising:
-
obtaining, by a processing circuit, a log file comprising a plurality of log entries from a memory circuit, wherein each log entry is identified by a corresponding line number; generating, by the processing circuit, a list that maps the line number of each log entry to a corresponding pattern of log entries, wherein each corresponding pattern of log entries is identified by a pattern number and represents a task performed by the computing device; computing, by the processing circuit, a pattern value for each pattern in the list; detecting, by the processing circuit, an anomalous pattern in the list; and outputting, by the processing circuit, an interactive graph to a display device, wherein the interactive graph plots the pattern value for a pattern in the list to the line number of a representative log entry in that pattern, and visually indicates the anomalous pattern to the user. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
-
-
10. A computing device comprising:
-
a communications interface circuit configured to communicatively connect to a communications network; and a processing circuit operatively connected to the communications interface circuit and configured to; obtain a log file comprising a plurality of log entries, wherein each log entry is identified by a corresponding line number; generate a list that maps the line number of each log entry to a corresponding pattern of log entries, wherein each corresponding pattern of log entries is identified by a pattern number and represents a corresponding task performed by a computer; compute a pattern value for each pattern in the list; detect an anomalous pattern in the list; and output an interactive graph to a display device, wherein the interactive graph plots the pattern value for a pattern in the list to the line number of a representative log entry in that pattern, and visually indicates the anomalous pattern to the user. - View Dependent Claims (11, 12, 13, 14, 15, 16, 17, 18)
-
-
19. A computer-readable storage medium comprising computer program code stored thereon that, when executed by a processing circuit of a computing device, configures the processing circuit to:
-
obtain a log file comprising a plurality of log entries, wherein each log entry is identified by a corresponding line number; generate a list that maps the line number of each log entry to a corresponding pattern of log entries, wherein each corresponding pattern of log entries is identified by a pattern number and represents a corresponding task performed by the computing device; compute a pattern value for each pattern in the list; detect an anomalous pattern in the list; and display an interactive graph on a display device for a user, wherein the interactive graph plots the pattern value for a pattern in the list to the line number of a representative log entry in that pattern, and visually indicates the anomalous pattern to the user.
-
Specification