Unified logging service for distributed applications

• US 7,685,143 B2
• Filed: 12/08/2003
• Issued: 03/23/2010
• Est. Priority Date: 02/20/2003
• Status: Active Grant

• Current Assignee: Twitter Inc (X Holdings Corp.)
• Original Assignee: International Business Machines Corporation
• Inventors: Tsui, Alex K., Polan, Michael G., Chen, Paul (Ming), Rosen, Arnold
• Primary Examiner(s): Wong; Don
• Assistant Examiner(s): Lie; Angela M
• Application Number:
  US10/730,656
• Publication Number:
  US 20040167912A1
• Time in Patent Office: 2,297 Days
• Field of Search: 707/100, 707/3, 707/101, 707/104.1, 709/223, 709/229
• US Class Current: 707/648
• CPC Class Codes: G06F 16/958 Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking

Abstract

A unified logging service is provided which may be employed across a variety of applications, allowing collected information to be stored, aggregated, and accumulated; presenting a more complete view, than previously available, related to those applications. The unified logging service provides a generalized centralized web services based service with the capability of accepting and collecting a variety of log formats containing a variety of logged events. These events may originate from clients using differing log formats or types in a heterogeneous distributed computing environment. Acknowledgement of receipt of log files may be provided to the originating clients. A log routing capability is also provided as well as a central repository for storing and forwarding log messages flowing throughout the system. These services may be accessed locally or remotely via published web services interfaces.

Claims

1. A method of providing a unified logging service, for use in a network having a plurality of nodes capable of generating event logs, wherein said unified logging service having a unified log server and repository, comprising the steps of:

converting an event log file of a first log type and structure associated with a sending node into a predefined format;

transmitting the converted event log file over the network to the unified log server;

receiving the converted event log file by the unified log server;

determining the log type of the converted log file and routing the converted log file to a log handler compatible with the log type and the predefined format;

identifying a receiving node compatible with the log type for the converted event log file, and forwarding the converted event log file from the log handler to the identified receiving node.

2. The method of claim 1, further comprising the step of:

acknowledging receipt of the converted event log file by the identified receiving node to the sending node.

3. The method of claim 2, further comprising the step of:

converting the acknowledgement to the predefined format.

4. The method of claim 1, further comprising the step of:

storing the converted log file in the repository.

5. The method of claim 1, wherein the predefined format comprises a unified logging format including a header and a body.

6. The method of claim 5 wherein the header contains information comprising:

a server identifier;

a log system identifier;

a log type identifier; and

a log create timestamp.

7. The method of claim 5 wherein the body contains transaction information as defined by the unified logging service, comprising:

a message portion, wherein the message portion is further defined by fields specific to the log type; and

a time stamp portion.

8. A computer readable storage medium tangibly embodying programmed instructions for performing the method of any of claims 1 to 7.

9. An apparatus for providing a unified logging service, comprising:

a unified logging server;

means for receiving an event log file at the unified logging server;

a log adapter for converting the event log file from a first structure to a predefined format;

means for determining a log type of the converted event log file and a log handler suitable for the log type;

means for forwarding the converted event log file to the log handler;

means for identifying a receiving node;

means for forwarding the converted event log file to the identified receiving node.

10. The apparatus of claim 9 further comprising:

a repository; and

means for storing the converted log file in the repository.

11. A system for providing a unified logging service comprising:

a sending node having a first structure;

an event log file having a first log type associated with the sending node;

a log adapter for the sending node for converting the event log file from the first structure to a predefined format;

means for transmitting the converted event log file across the network to a unified logging server;

means for receiving the converted event log file at the unified logging server;

means for determining the log type of the converted event log file and a log handler suitable for the log type;

means for forwarding the converted event log file to the log handler;

means for identifying a receiving node for the converted event log file;

means for forwarding the converted event log file to the identified receiving node.

12. The system of claim 11 further comprising:

means for acknowledging receipt of the converted event log file by the identified receiving node to the sending node.

13. The system of claim 11 further comprising:

a log adapter for the receiving node for converting the predefined format to an event log file of the first structure.

14. The system of claim 12 further comprising:

means for converting the acknowledgement to the predefined format.

15. The system of claim 11 further comprising means for storing the converted log file in the repository.

16. An article of manufacture comprising a processor useable medium having a processor readable program embodied in said medium, wherein the processor readable program when executed on or more processors causes the processors to:

convert an event log file of a first log type and structure associated with a sending node into a predefined format;

transmit the converted event log file onto a network to a unified log server;

receive the converted event log file by the unified log server;

determine the log type of the converted log file and rout the converted log file to a log handler compatible with the determined log type and the predefined format;

identify a receiving node compatible with the log type for the converted event log file, and forward the converted event log file from the log handler to the identified receiving node.

17. The article of manufacture of claim 16, wherein the processor readable program causes one or more processors to:

acknowledge receipt of the converted event log file by the identified receiving node.

18. The article of manufacture of claim 17, wherein the processor readable program causes one or more processors to:

convert the acknowledgement to the predefined format.

19. The article of manufacture of claim 16, wherein the processor readable program causes one or more processors to:

store the converted log file in the repository.

20. The article of manufacture of claim 16, wherein the predefined format comprises a unified logging format including a header and a body.

21. The article of manufacture of claim 20, wherein the header contains information comprising:

a server identifier;

a log system identifier;

a log type identifier; and

a log create timestamp.

22. The article of manufacture of claim 20, wherein the body contains transaction information as defined by the unified logging service, comprising:

a message portion, wherein the message portion is further defined by fields specific to the log type; and

a time stamp portion.