Task oriented log retrieval utilizing a self-learning search tool

• US 7,536,376 B2
• Filed: 10/03/2003
• Issued: 05/19/2009
• Est. Priority Date: 10/03/2003
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Morgan, Mary Anne, Nguyen, Trung Q., Sullivan, Thomas R., D'Angelo, Dario, Smith, Alan R.
• Primary Examiner(s): Alam; Hosain T
• Assistant Examiner(s): Saeed; Usmaan
• Application Number:
  US10/678,436
• Publication Number:
  US 20050076006A1
• Time in Patent Office: 2,055 Days
• Field of Search: 707 1- 10, 707100-1041, 707200-205
• US Class Current: 1/1
• CPC Class Codes: G06F 11/3476 Data logging G06F11/14, G06F11/2205 take precedence
• CPC Class Codes: G06F 16/2308 Concurrency control transaction processing G06F9/466
• CPC Class Codes: G06F 16/2358 Change logging, detection, and notification replication G06F16/27
• CPC Class Codes: G06F 2201/80 Database-specific techniques
• CPC Class Codes: Y10S 707/99932 Access augmentation or optimizing
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99953 Recoverability

Abstract

A user command communicating at least one log record search key is received from a user. A first set of one or more log records matching the log record search key is retrieved. Utilizing one or more fields from these log records, additional search criteria is dynamically composed. A second set of one or more log records matching the additional search criteria is retrieved from the DBMS log file wherein this second set of log records is logically related to the first set of log records and wherein the second set of log records is void of the log record search key. A log retrieval routine or tool deploying the above method is hereinafter referred to as a “self-learning log retrieval tool”.

Claims

1. A computer implemented method for retrieving log data from an IMS (Information Management System) log file comprising:

receiving from a user a command issued by a computing device comprising a processor and a memory, wherein said command communicates at least one IMS log record search key;

retrieving from an IMS log file a first set of one or more IMS log records matching said IMS log record search key, each IMS log record comprising a one-byte hex field that identifies a log record type associated with each log record, each log record type associated with a particular set of searchable log record fields;

utilizing one or more log record fields from said first retrieved set of one or more IMS log records to dynamically compose additional search criteria, said additional search criteria comprising at least one additional IMS log record search key not included in the original communicated at least one IMS log record search key;

retrieving from said IMS log file a second set of one or more IMS log records matching said additional search criteria, wherein said second set of IMS log records is logically related to said first set of IMS log records and wherein said second set of IMS log records does not include members of said first set of IMS log records; and

presenting said first set of IMS log records and said second set of IMS log records.

2. The method of claim 1 further comprising generating a report wherein said report comprises information from said first set of log records and said second set of log records.

3. The method of claim 1 further comprising resetting said dynamically composed additional search criteria if an End Bracket log record is retrieved and if said log record search key comprises a recurring key.

4. The method of claim 1 wherein said IMS (Information Management System) log file is an IMS OLDS (Online Log Data Set) log file.

5. The method of claim 4 further comprising printing a message when a retrieved log record is not encompassed by a retrieved Begin Bracket log record and a retrieved End Bracket log record.

6. The method of claim 1 further comprising the termination of all subsequent log record retrievals if an End Bracket log record is retrieved and if said log record search key comprises an event key.

7. The method of claim 1 wherein said additional search criteria comprises a database name key.

8. The method of claim 1 further comprising utilizing one or more fields from said second set of log records to dynamically further modify said additional search criteria wherein a third set of one or more log records is retrieved utilizing said modified additional search criteria.

9. A computer implemented method for retrieving information from a set of log records residing within an IMS (Information Management System) log file, comprising:

determining an IMS log retrieval search key;

invoking a self-learning log retrieval tool operated by a computing device comprising a processor and a memory, wherein said IMS log retrieval search key is made available to said self-learning log retrieval tool, the self-learning retrieval tool configured to

retrieve from an IMS log file a first set of one or more IMS log records matching said IMS log record search key, each IMS log record comprising a one-byte hex field that identifies a log record type associated with each log record, each log record type associated with a particular set of searchable log record fields;

utilize one or more log record fields from said first retrieved set of one or more IMS log records to dynamically compose additional search criteria, said additional search criteria comprising at least one additional IMS log record search key not included in the original communicated at least one IMS log record search key; and

receiving a report generated by said self-learning log retrieval tool wherein said report comprises information from a plurality of IMS log records and wherein at least one of said plurality of IMS log records does not include said IMS log retrieval search key.

10. A computer implemented method for retrieving log data from an IMS (Information Management System) log file comprising:

receiving from a user a command issued by a computing device comprising a processor and a memory, wherein said command communicates at least one IMS log record search key;

retrieving from an IMS log file a first set of one or more IMS log records matching said IMS log record search key, each IMS log record comprising a one-byte hex field for identifying a log record type associated with each log record, each log record type associated with a particular set of searchable log record fields;

identifying a log record type of a first IMS log record from said first retrieved set of one or more IMS log records;

determining whether the original communicated IMS log record search key is an event driven key or a recurring key;

processing one or more fields from the first IMS log record according to the identified log record type and according to the determination that the original communicated IMS log record search key is an event driven key or a recurring key;

dynamically generating additional search criteria comprising one or more IMS log record search keys based the one or more processed fields of the first IMS log record;

retrieving from said IMS log file a second set of one or more IMS log records matching said additional search criteria, wherein said second set of IMS log records is logically related to said first set of IMS log records and wherein said second set of IMS log records does not include members of said first set of IMS log records; and

presenting the first set of IMS log records and the second set of IMS log records.