Scrubbing and editing of diagnostic data

• US 8,688,700 B2
• Filed: 10/15/2008
• Issued: 04/01/2014
• Est. Priority Date: 10/19/2007
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Fallen, Marcus, Dageville, Benoit, Klein, Jonathan, Mysorenagarajarao, Ajith Kumar, Ngai, Gary, Ramacher, Mark, Sarig, Yair
• Primary Examiner(s): Perveen, Rehana
• Assistant Examiner(s): Hoffler, Raheem
• Application Number:
  US12/251,685
• Publication Number:
  US 20090106262A1
• Time in Patent Office: 1,994 Days
• Field of Search: None
• US Class Current: 707/736
• CPC Class Codes: G06F 11/0748 in a remote unit communicating with a single-box computer node experiencing an error/fault remote testing G06F11/2294
• CPC Class Codes: G06F 11/0778 Dumping, i.e. gathering error/state information after a fault for later diagnosis
• CPC Class Codes: G06F 11/0781 Error filtering or prioritizing based on a policy defined by the user or on a policy defined by a hardware/software module, e.g. according to a severity level
• CPC Class Codes: H04L 41/0681 Configuration of triggering conditions
• CPC Class Codes: H04L 41/16 using machine learning or artificial intelligence

Abstract

Techniques that enable a user or customer at a system site to review and, if desired, modify data identified at the system site for transmission to a diagnosis site prior to the transmission. The identified diagnostic data may be modified such that data that the user does not want to be sent to the diagnosis site (e.g., sensitive data) is excluded from the data communicated to the diagnosis site. The data may be modified by removing or excluding the sensitive data from the data that is communicated to the diagnosis site or replacing the sensitive data with non-sensitive data. The modified data may then be communicated from the system site to the diagnosis site in the form of a package.

Claims

1. A method of preparing diagnostic data for communication from a first site to a second site, the method comprising:

determining, at the first site, diagnostic data to be communicated from the first site to the second site, the diagnostic data related to a problem and one or more first incidents associated with the problem in a system at the first site,

identifying, at the first site, one or more second incidents that are correlated to the one or more first incidents,

wherein correlation of the one or more second incidents to the one or more first incidents is based upon correlation keys associated with the respective incidents, the correlation keys being attribute-value pairs in metadata generated for the respective incidents identifying processes in the system at the first site;

including, at the first site, data related to the one or more second incidents in the diagnostic data;

generating, at the first site, information configured to display a user interface configured for enabling review of the diagnostic data by a user at the first site prior to communication of the diagnostic data from the first site to the second site;

receiving, at the first site, information via the user interface enabling the user to change the diagnostic data prior to communication of the diagnostic data from the first site to the second site;

receiving, at the first site, input via the user interface to replace a piece of the data related to the one or more second incidents included in the diagnostic data with a modified piece of data; and

communicating a modified version of the diagnostic data from the first site to the second site, wherein the modified version includes the modified piece of the data related to the one or more second incidents.

2. The method of claim 1 further comprising:

receiving input to exclude a piece of data from the diagnostic data; and

communicating a modified version of the diagnostic data from the first site to the second site, wherein the modified version excludes the piece of data.

3. The method of claim 1 further comprising:

copying a file out from the diagnostic data, the file comprising the piece of data; and

copying a modified version of the file into the diagnostic data, wherein the modified version comprises the modified piece of data instead of the piece of data.

4. The method of claim 1 further comprising:

receiving input identifying additional data to be communicated to the second site from the first site along with the diagnostic data; and

communicating both the diagnostic data and the additional data from the first site to the second site.

5. The method of claim 1 wherein the diagnostic data comprises data related to one or more errors in the system.

6. The method of claim 1 wherein:

generating the information configured to display the user interface configured for enabling review of the diagnostic data comprises generating information configured for displaying a list of files included in the diagnostic data; and

receiving the information configured for enabling the user to change the diagnostic data comprises receiving information configured for enabling the user to

(a) remove one or more files from the list of files from the diagnostic data,

(b) replace a file included in the diagnostic data with a modified version of the file, or

(c) add a new file not included in the list of files to the diagnostic data.

7. The method of claim 1, wherein the one or more second incidents that are correlated to the one or more first incidents comprise one or more incidents that are part of a single logical operation of which the one or more first incidents are also a part.

8. The method of claim 1, wherein the one or more second incidents that are correlated to the one or more first incidents comprise one or more incidents that occur in the same context as the one or more first incidents.

9. A non-transitory computer readable storage medium storing a plurality of instructions for controlling a processor to prepare diagnostic data for communication from a first site to a second site, the plurality of instructions comprising:

instructions that cause the processor to determine, at the first site, diagnostic data to be communicated from the first site to the second site, the diagnostic data related to a problem and one or more first incidents associated with the problem in a system at the first site;

instructions that cause the processor to identify one or more second incidents that are correlated to the one or more first incidents,

wherein correlation of the one or more second incidents to the one or more first incidents is based upon correlation keys associated with the respective incidents, the correlation keys being attribute-value pairs in metadata generated for the respective incidents identifying components from a call stack;

instructions that cause the processor to include data related to the one or more second incidents in the diagnostic data;

instructions that cause the processor to generate information configured to display a user interface configured to enable review of the diagnostic data by a user at the first site prior to communication of the diagnostic data from the first site to the second site; and

instructions that cause the processor to receive information via user interface configured to enable the user to change the diagnostic data prior to communication of the diagnostic data from the first site to the second site;

instructions that cause the processor to receive input via the user interface to replace a piece of the data related to the one or more second incidents included in the diagnostic data with a modified piece of data and

instructions that cause the processor to communicate a modified version of the diagnostic data from the first site to the second site, wherein the modified version includes the modified piece of the data related to the one or more second incidents.

10. The computer readable storage medium of claim 9 wherein the plurality of instructions further comprises:

instructions that cause the processor to receive input to exclude a piece of data from the diagnostic data; and

instructions that cause the processor to communicate a modified version of the diagnostic data from the first site to the second site, wherein the modified version excludes the piece of data.

11. The computer readable storage medium of claim 9 wherein the plurality of instructions further comprises:

instructions that cause the processor to copy a file out from the diagnostic data, the file comprising the piece of data; and

instructions that cause the processor to copy a modified version of the file into the diagnostic data, wherein the modified version comprises the modified piece of data instead of the piece of data.

12. The computer readable storage medium of claim 9 wherein the plurality of instructions comprises:

instructions that cause the processor to receive input identifying additional data to be communicated to the second site from the first site along with the diagnostic data; and

instructions that cause the processor to communicate both the diagnostic data and the additional data from the first site to the second site.

13. The computer readable storage medium of claim 9 wherein the diagnostic data comprises data related to one or more errors in the system.

14. The computer readable storage medium of claim 9 wherein:

the instructions that cause the processor to generate the information configured to display the user interface configured to enable review of the diagnostic data comprise instructions that cause the processor to generate information configured to display a list of files included in the diagnostic data; and

the instructions that cause the processor to receive the information configured to enable the user to change the diagnostic data comprise instructions that cause the processor to receive information configured to enable the user to

(a) remove one or more files from the list of files from the diagnostic data,

(b) replace a file included in the diagnostic data with a modified version of the file,

or (c) add a new file not included in the list of files to the diagnostic data.

15. A system located at a first site for preparing diagnostic data for communication from the first site to a second site, the system comprising:

a memory; and

a processor coupled to the memory;

wherein the processor is configured to;

determine diagnostic data to be communicated from the first site to the second site, the diagnostic data related to a problem and one or more first incidents associated with the problem in a system at the first site;

identify one or more second incidents that are correlated to the one or more first incidents,

wherein correlation of the one or more second incidents to the one or more first incidents is based upon correlation keys associated with the respective incidents, the correlation keys being attribute-value pairs in metadata generated for the respective incidents identifying transactions in the system at the first site;

include data related to the one or more second incidents in the diagnostic data;

generate information configured to display a user interface configured to enable review of the diagnostic data by a user prior to communication of the diagnostic data to the second site;

receive information via the user interface configured to enable the user to change the diagnostic data prior to communication of the diagnostic data to the second site;

receiving, at the first site, input via the user interface to replace a piece of the data related to the one or more second incidents included in the diagnostic data with a modified piece of data; and

communicating a modified version of the diagnostic data from the first site to the second site, wherein the modified version includes the modified piece of the data related to the one or more second incidents.

16. The system of claim 15 wherein the processor is configured to:

receive input to exclude a piece of data from the diagnostic data; and

communicate a modified version of the diagnostic data to the second site, wherein the modified version excludes the piece of data.

17. The system of claim 15 wherein the processor is configured to:

copy a file out from the diagnostic data, the file comprising the piece of data; and

copy a modified version of the file into the diagnostic data, wherein the modified version comprises the modified piece of data instead of the piece of data.

18. The system of claim 15 wherein the processor is configured to:

receive input identifying additional data to be communicated to the second site along with the diagnostic data; and

communicate both the diagnostic data and the additional data to the second site.

19. The system of claim 15 wherein the processor is configured to:

generate the information configured to display the user interface to enable review of the diagnostic data by displaying a list of files included in the diagnostic data; and

receiving the information configured to enable the user to change the diagnostic data comprises receiving information configured to enable the user to

(a) remove one or more files from the list of files from the diagnostic data,

(b) replace a file included in the diagnostic data with a modified version of the file, or

(c) add a new file not included in the list of files to the diagnostic data.