Method and system for analyzing error logs for diagnostics

• US 5,463,768 A
• Filed: 03/17/1994
• Issued: 10/31/1995
• Est. Priority Date: 03/17/1994
• Status: Expired due to Fees

• Current Assignee: General Electric Company
• Original Assignee: General Electric Company
• Inventors: Cuddihy, Paul E., Shah, Rasiklal P.
• Primary Examiner(s): Canney, Vincent P.
• Application Number:
  US08/214,266
• Time in Patent Office: 593 Days
• Field of Search: 371/19, 371/29.1, 371/16.5, 395/575, 395/500, 364/265, 364/266.6, 364/266.4, 364/267.7, 364/274.2, 364/274.3, 364/277
• US Class Current: 714/37
• CPC Class Codes: G06F 11/079 Root cause analysis, i.e. error or fault diagnosis in a hardware test environment G06F11/22; in a software test environment G06F11/36
• CPC Class Codes: G06F 11/2205 using arrangements specific to the hardware being tested

Abstract

The present invention discloses an error log analysis system comprising a diagnostic unit and a training unit. The training unit includes a plurality of historical error logs generated during abnormal operation or failure from a plurality of machines, and the actual fixes (repair solutions) associated with the abnormal events or failures. A block finding unit identifies sections of each error log that are in common with sections of other historical error logs. The common sections are then labelled as blocks. Each block is then weighted with a numerical value that is indicative of its value in diagnosing a fault. In the diagnostic unit, new error logs associated with a device failure or abnormal operation are received and compared against the blocks of the historical error logs stored in the training unit. If the new error log is found to contain block(s) similar to the blocks contained in the logs in the training unit, then a similarity index is determined by a similarity index unit, and solution(s) is proposed to solve the new problem. After a solution is verified, the new case is stored in the training unit and used for comparison against future new cases.

Claims

1. An error log analysis system for analyzing an error log generated from a malfunctioning machine, comprising:

means for storing a plurality of historical error logs generated from a plurality of malfunctioning machines, each of the plurality of historical error logs containing data representative of events occurring at the plurality of malfunctioning machines during operation, the plurality of historical error logs being grouped into case sets of common malfunctions;

means for receiving a new error log from a malfunctioning machine, the new error log containing data representative of events occurring at the malfunctioning machine during operation;

means for comparing the new error log to the plurality of historical error logs, the comparing means locating sections of data in the new error log that are common to sections of data in each of the case sets defined for the plurality of historical error logs, the comparing means comprising block finding means for finding the common sections of data between each of the case sets in the plurality of historical error logs, the common sections of data being identified as blocks; and

means for predicting which of the common sections of data are indicative of the malfunction.

2. The error log analysis system according to claim 1, further comprising means for formatting the new error log and the plurality of historical error logs into a suitable format.

3. The error log analysis system according to claim 2, wherein the formatting means comprises means for parsing non-essential data from the error logs.

4. The error log analysis system according to claim 3, wherein the formatting means comprises means for columnizing the parsed data into a columnized format.

5. The error log analysis system according to claim 1, further comprising means for storing the blocks of data.

6. The error log analysis system according to claim 1, further comprising a block matching unit for matching blocks of data from the new error log to the blocks stored in the storing means.

7. The error log analysis system according to claim 1, wherein the predicting means further comprises weighting means for assigning a numerical weight to each of the located common sections of data, the weight being a measure of fault contribution to the malfunction.

8. The error log analysis system according to claim 7, wherein the weighting means includes a weighted history chart, wherein each block is arranged in case sets listed with a weight value, blocks having a higher instance of occurrence in the case sets being assigned a lower weight value and blocks having a lower instance of occurrence in the case sets being assigned a higher weight value.

9. The error log analysis system according to claim 8, wherein the weighting means uses an exponential weighting scheme.

10. The error log analysis system according to claim 8, further comprising means for determining an index of similarity between the new error log and the weighted blocks, the similarity index being a measure of similarity between the new error log to the blocks in the weighted history chart.

11. The error log analysis system according to claim 10, wherein the determining means generates a high similarity index for blocks with a close match and a low similarity index for blocks with a bad match.

12. An error log analysis system for analyzing an error log generated from a medical imaging device, comprising:

means for storing a plurality of historical error logs generated from a plurality of medical imaging devices, each of the plurality of historical error logs containing data representative of events occurring at the plurality of medical imaging devices, the plurality of historical error logs being grouped into case sets of common malfunctions;

means for receiving a new error log from a malfunctioning medical imaging device, the new error log containing data representative of events occurring at the malfunctioning medical imaging device;

means for comparing the new error log to the plurality of historical error logs, the comparing means locating sections of data in the new error log that are common to sections of data in each of the case sets defined from the plurality of historical error logs, the comparing means comprising block finding means for finding the common sections of data between each of the case sets in the plurality of historical error logs, the common sections being identified as blocks;

means for assigning a weight to each of the identified blocks of data, the weight being a measure of fault contribution to the malfunction; and

means for determining an index of similarity between the new error log and the weighted blocks, the similarity index being a measure of how similar the new error log is to the weighted blocks and being used to appropriate fault contribution.

13. A method for analyzing an error log generated from a malfunctioning device, comprising the steps of:

storing a plurality of historical error logs generated from a plurality of malfunctioning devices, each of the plurality of historical error logs containing data representative of events occurring at the plurality of malfunctioning devices, the plurality of historical error logs being grouped into case sets of common malfunctions;

receiving a new error log from a malfunctioning device, the new error log containing data representative of events occurring at the malfunctioning device;

comparing the new error log to the plurality of historical error logs;

locating sections of data in the new error log that are common to sections of data in each of the case sets defined from the plurality of historical error logs, the step of locating comprising finding common sections of data between each of the case sets in the plurality of historical error logs, the common sections of data being identified as blocks; and

determining which of the common sections of data are causing a fault at the malfunctioning device.

14. The method of analyzing an error log according to claim 13, further comprising the step of formatting the new error log and the plurality of historical error logs into a suitable format.

15. The method of analyzing an error log according to claim 14, further comprising the step of parsing essential data from the error logs.

16. The method of analyzing an error log according to claim 15, further comprising the step of columnizing the parsed data into a columnized format.

17. The method of analyzing an error log according to claim 13, further comprising the step of storing the blocks of data.

18. The method of analyzing an error log according to claim 17, further comprising the step of matching blocks of data from the new error log to the stored blocks.

19. The method of analyzing an error log according to claim 13, further comprising the step of assigning a weight to each of the located common sections of data, the weight being a measure of fault contribution to the malfunction.

20. The method of analyzing an error log according to claim 19, wherein the step of assigning a weight includes forming a weighted history chart, wherein each block and their occurrences in case sets is listed with a weight value, blocks having a higher instance of occurrence being assigned a lower weight value and blocks with a lower instance of occurrence being assigned a higher weight value.

21. The method of analyzing an error log according to claim 20, further comprises the step of determining an index of similarity between the new error log and the weighted blocks, the similarity index being a measure of how similar the new error log is to the blocks in the weighted history chart.

22. A method of analyzing an error log generated from a medical imaging device, comprising:

storing a plurality of historical error logs generated from a plurality of medical imaging devices, each of the plurality of historical error logs containing data representative of events occurring at the plurality of medical imaging devices, the plurality of historical error logs being grouped into case sets of common malfunctions;

receiving a new error log from a malfunctioning medical imaging device, the new error log containing data representative of events occurring at the malfunctioning medical imaging device;

comparing the new error log to the plurality of historical error logs;

locating sections of data in the new error log that are common to sections of data in each of the case sets defined from the plurality of historical error logs, the step of locating comprising finding common sections of data between each of the case sets in the plurality of historical error logs, the common sections of data being identified as blocks;

assigning a weight to each of the identified blocks of data, the weight being a measure of fault contribution; and

determining an index of similarity between the new error log and the weighted blocks, the similarity index being a measure of how similar the new error log is to the weighted blocks and being used to appropriate fault contribution.