Log analysis method and recording medium storing log analysis program
First Claim
1. A log analysis method comprising:
- executing a program a plurality of times;
generating a plurality of logs, each log being recorded a plurality of events occurring upon the execution of the program according to an occurrence order of each of the events in each of the logs;
performing a first calculation to calculate an event occurrence probability, for the occurrence order of each event, based on at least one from the program description concerning each event recorded in the logs and the data to be used upon the execution of the program description; and
outputting information concerning an event which corresponds to a characteristic included in the logs, based on the event occurrence probability.
1 Assignment
0 Petitions
Accused Products
Abstract
One of log analysis methods of the present invention includes the step of executing a program a plurality of times; executing a program a plurality of times; the step of generating a plurality of logs, each log being recorded a plurality of events occurring upon the execution of the program according to an occurrence order of each of the events in each of the logs; the step of performing a first calculation to calculate an event occurrence probability, for the occurrence order of each event, based on at least one from the program description concerning each event recorded in the logs and the data to be used upon the execution of the program description; and the step of outputting information concerning an event which corresponds to a characteristic included in the logs, based on the event occurrence probability.
-
Citations
16 Claims
-
1. A log analysis method comprising:
-
executing a program a plurality of times;
generating a plurality of logs, each log being recorded a plurality of events occurring upon the execution of the program according to an occurrence order of each of the events in each of the logs;
performing a first calculation to calculate an event occurrence probability, for the occurrence order of each event, based on at least one from the program description concerning each event recorded in the logs and the data to be used upon the execution of the program description; and
outputting information concerning an event which corresponds to a characteristic included in the logs, based on the event occurrence probability. - View Dependent Claims (2, 3, 4, 5, 6)
-
-
7. A log analysis method configured to analyze a log in which a series of events occurring upon execution of a program are recorded according to an occurrence order of each of the events, the log analysis method comprising:
-
classifying each event based on a reference to a memory area being performed upon execution of a program description corresponding to the each event;
generating a classified log, in each of which one or more events classified as event concerning the reference to the memory area, are recorded according to the occurrence order of each event, for each memory area;
generating an event row in which a plurality of events are recorded according to the occurrence order of each of the plurality of events, based on events recorded in each of the plurality of classified logs;
comparing each event recorded in the event row with each event recorded in each of the classified logs respectively;
converting each of the classified logs into converted log respectively, based on result of the comparison;
calculating an event occurrence probability for the occurrence order of each event, based on each program description concerning each event recorded in each of the converted logs;
calculating rarity, indicating a level of an occurrence frequency of each event, for the occurrence order of each event, based on each calculated event occurrence probability; and
outputting information concerning the event which corresponds to a characteristic included in the converted logs, based on each calculated rarity. - View Dependent Claims (8)
-
-
9. A computer-readable recording medium storing a log analysis program configured to analyze a log by controlling a computer, the log analysis program causing a computer to execute a process comprising:
-
executing a program a plurality of times;
generating a plurality of logs, each log being recorded a plurality of events occurring upon the execution of the program according to an occurrence order of each of the events in each of the logs;
performing a first calculation to calculate an event occurrence probability, for the occurrence order of each event, based on at least one from the program description concerning each event recorded in the logs and the data to be used upon the execution of the program description; and
outputting information concerning an event which corresponds to a characteristic included in the logs, based on the event occurrence probability. - View Dependent Claims (10, 11, 12, 13, 14)
-
-
15. A computer-readable recording medium storing a log analysis program configured to analyze a log by controlling a computer, the log in which a series of events occurring upon execution of a program are recorded according to an occurrence order of each of the events, the log analysis program causing a computer to execute a process comprising:
-
classifying each event based on a reference to a memory area being performed upon execution of a program description corresponding to the each event;
generating a classified log, in each of which one or more events classified as event concerning the reference to the memory area, are recorded according to the occurrence order of each event, for each memory area;
generating an event row in which a plurality of events are recorded according to the occurrence order of each of the plurality of events, based on events recorded in each of the plurality of classified logs;
comparing each event recorded in the event row with each event recorded in each of the classified logs respectively;
converting each of the classified logs into converted log respectively, based on result of the comparison;
calculating an event occurrence probability for the occurrence order of each event, based on each program description concerning each event recorded in each of the converted logs;
calculating rarity, indicating a level of an occurrence frequency of each event, for the occurrence order of each event, based on each calculated event occurrence probability; and
outputting information concerning the event which corresponds to a characteristic included in the converted logs, based on each calculated rarity. - View Dependent Claims (16)
-
Specification