System and method of intelligent log agents

• US 8,892,518 B1
• Filed: 07/27/2012
• Issued: 11/18/2014
• Est. Priority Date: 07/27/2012
• Status: Active Grant

• Current Assignee: T-Mobile Innovations LLC (Deutsche Telekom AG)
• Original Assignee: Sprint Communications Company LP (Deutsche Telekom AG)
• Inventors: Kannan, Suresh
• Primary Examiner(s): Filipczyk, Marc
• Application Number:
  US13/559,608
• Time in Patent Office: 844 Days
• Field of Search: 705/7.22, 705/7.27, 705/301, 707/631, 707/633, 707/640, 707/736, 707/770, 709/202, 709/224, 709/226
• US Class Current: 707/631
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/0748 in a remote unit communicating with a single-box computer node experiencing an error/fault remote testing G06F11/2294
• CPC Class Codes: G06F 11/0784 Routing of error reports, e.g. with a specific transmission path or data flow
• CPC Class Codes: G06F 11/3476 Data logging G06F11/14, G06F11/2205 take precedence
• CPC Class Codes: G06F 2201/865 Monitoring of software

Abstract

A computing system. The system comprises enterprise computers, each enterprise computer executing at least one instance of an enterprise application and executing one logging agent associated with each instance of the enterprise application; logging computers each executing at least one instance of a logging distribution application that is configured to receive logs from the logging agent application instances; and a centralized log repository computer that executes a log file manager. Each of the logging agent applications analyze a processing load of the logging computers and transmit logs to a logging computer that the logging agent application adaptively selects based on the analysis by the logging agent application of the processing load of the logging computers, wherein each logging distribution application is configured to forward logs received from logging agent applications to the centralized log repository computer, and wherein the log file manager writes the logs into log files.

Claims

1. A computing system, comprising:

a plurality of enterprise application execution computers, each enterprise application execution computer executing at least one instance of an enterprise application and executing one logging agent application associated with each instance of the enterprise application;

a plurality of logging computers, each logging computer executing at least one instance of a logging distribution application that is configured to receive logs from the logging agent application instances; and

a centralized log repository computer that executes a log file manager,

wherein each of the logging agent applications is configured to analyze a processing load of the logging computers and to transmit logs generated by an instance of the enterprise application to a logging computer that the logging agent application adaptively selects based on the analysis by the logging agent application of the processing load of the logging computers,

wherein each logging distribution application is configured to broadcast an indication of the processing load of the logging computer on which the logging distribution application executes and to forward logs received from logging agent applications to the centralized log repository computer, and

wherein the log file manager receives logs, purges the received logs of credit card numbers and social security numbers, and writes the purged logs into log files.

2. The system of claim 1, wherein each logging distribution application broadcasts the indication of the processing load to a multi-cast internet protocol address.

3. The system of claim 2, wherein each logging distribution application broadcasts the indication of the processing load to a channel of the multi-cast internet protocol address, where the channel is associated specifically with that logging distribution application.

4. The system of claim 3, wherein each logging distribution application broadcasts its own internet protocol address in the channel of the multi-cast internet protocol address.

5. The system of claim 3, wherein each logging distribution application is configured to shut down a channel of the multi-cast internet protocol address associated with a logging computer that has crashed.

6. The system of claim 5, wherein a logging distribution application determines that a logging computer has crashed by sending a ping communication to the logging computer that is not replied to.