×

Visualization of graphical representations of log files

  • US 9,519,698 B1
  • Filed: 03/15/2016
  • Issued: 12/13/2016
  • Est. Priority Date: 01/20/2016
  • Status: Expired due to Fees
First Claim
Patent Images

1. A computer-implemented method comprising:

  • receiving one or more log files, each of said one or more log files comprising one or more logs, said one or more logs comprising structured data written in text format;

    extracting one or more event records from said one or more logs, wherein each of said one or more event records comprises at least one of an event message, an event origin, and an event type;

    normalizing each of said at least one event message, said normalizing further comprising normalizing variable fields located within each of said one or more event records into a set of predefined symbols;

    for each event record of said one or more event records;

    determining one or more attributes based on said event record; and

    determining at least one dimension based on said event record, said at least one dimension being selected from the group consisting of;

    (a) time;

    (b) frequency;

    (c) message length; and

    grouping said one or more event records into one or more attribute groups; and

    ordering said one or more event records of each said one or more attribute groups by said one or more dimensions, each of said one or more event records of said one or more attribute groups being ordered according to at least one metric selected from the group consisting of;

    (a) time of occurrence;

    (b) message length;

    (c) frequency of occurrence;

    (d) importance;

    (e) relevance; and

    generating one or more graphical representations of said one or more attribute groups, wherein at least one of said one or more graphical representations comprises;

    a scatter plot, said scatter plot displaying data based on at least one of said one or more events records, at least one of said one or more attributes, and at least one of said one or more dimensions, said scatter plot identifying at least one pattern event selected from the group consisting of;

    (a) repeated events;

    (b) periodical events;

    (c) missing events;

    (d) abnormal events; and

    (e) related events,said scatter plot further being modified by filtering said one or more event records based on one or more filter criteria, said filtering comprising updating a relevance score; and

    displaying details of at least one of said one or more event records.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×