Language independent processing of logs in a log analytics system

• US 9,852,129 B2
• Filed: 11/26/2013
• Issued: 12/26/2017
• Est. Priority Date: 11/26/2013
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Ramakrishnan, Arun, Shetty, Rohit
• Primary Examiner(s): COLUCCI, MICHAEL C
• Application Number:
  US14/090,053
• Publication Number:
  US 20150149147A1
• Time in Patent Office: 1,491 Days
• Field of Search: 704 2, 704 4, 717137, 717124, 717110, 715273, 715230, 709225, 709220, 707769, 707709
• CPC Class Codes: G06F 40/55 Rule-based translation
• CPC Class Codes: G06F 40/58 Use of machine translation, e.g. for multi-lingual retrieval, for server-side translation for client devices or for real-time translation

Abstract

Log files include log file content, some of which (especially a non-runtime portion) is in human-readable language. Translation of log file content is accomplished by: (i) generating first log content in a first human-readable language using a first resource bundle related to data translation; and (ii) translating the first log content to second log content, which corresponds to the first log content but is in a second human-readable language, using the first resource bundle. The translated log content may have annotations and/or processing rules applied to it. The translation of the present invention can help to keep the translation accurate and uniform so that the translated log content may be more effectively used in various ways.

Claims

1. A computer program product comprising:

one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions comprising instructions to perform;

receiving, from a first system, and by a correlation engine that uses a log entry language, a first log entry generated in response to a system error, where the first log entry is written in a first language;

receiving, from a second system, and by the correlation engine, a second log entry generated in response to the system error, where the second log entry is written in a second language;

on condition the log entry language is different than the first language, translating the first log entry to the log entry language;

on condition the log entry language is different than the second language, translating the second log entry to the log entry language;

applying an annotation to the first log entry to identify a characteristic of the first log entry;

applying an annotation to the second log entry to identify a characteristic of the second log entry;

correlating the first log entry with the second log entry based on the annotations applied respectively to the first log entry and the second log entry;

responsive to correlating the first log entry with the second log entry;

determining, by an analytics engine, a cause of the system error,

generating, by the analytics engine, a first message,

generating, by the analytics engine, a second message,

sending the first message to the first system, and

sending the second message to the second system.

2. The computer program product of claim 1, wherein the first message instructs the first system as to how to correct the system error.

3. The computer program product of claim 1, wherein the second message instructs the second system to retry an operation that precipitated the system error.

4. A computer system comprising:

one or more computer processors;

one or more computer-readable storage media;

program instructions stored on the computer-readable storage media for execution by at least one of the one or more processors, the program instructions comprising instructions to perform;

receiving, from a first system, and by a correlation engine that uses a log entry language, a first log entry generated in response to a system error, where the first log entry is written in a first language;

receiving, from a second system, and by the correlation engine, a second log entry generated in response to the system error, where the second log entry is written in a second language;

on condition the log entry language is different than the first language, translating the first log entry to the log entry language;

on condition the log entry language is different than the second language, translating the second log entry to the log entry language;

applying an annotation to the first log entry to identify a characteristic of the first log entry;

applying an annotation to the second log entry to identify a characteristic of the second log entry;

correlating the first log entry with the second log entry based on the annotations applied respectively to the first log entry and the second log entry;

responsive to correlating the first log entry with the second log entry;

determining, by an analytics engine, a cause of the system error,

generating, by the analytics engine, a first message,

generating, by the analytics engine, a second message,

sending the first message to the first system, and

sending the second message to the second system.

5. The computer system of claim 4, wherein the first message instructs the first system as to how to correct the system error.

6. The computer system of claim 4, wherein the second message instructs the second system to retry an operation that precipitated the system error.