METHOD AND SYSTEM FOR PARAMETERIZING LOG FILE LOCATION ASSIGNMENTS FOR A LOG ANALYTICS SYSTEM

• US 20160292166A1
• Filed: 04/01/2016
• Published: 10/06/2016
• Est. Priority Date: 04/03/2015
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: RUSSELL, Jerry Paul
• Granted Patent: US 10,585,908 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 11/00 Error detection; Error correction; Monitoring error detection, correction or monitoring in information storage based on relative movement between record carrier and transducer G11B20/18; monitoring, i.e. supervising the progress of recording or reproducing G11B27/36; in static stores G11C29/00
• CPC Class Codes: G06F 11/0766 Error or fault reporting or storing
• CPC Class Codes: G06F 11/0775 Content or structure details of the error report, e.g. specific table structure, specific error fields
• CPC Class Codes: G06F 11/3006 where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems multiprogramming arrangements G06F9/46; allocation of resources G06F9/50
• CPC Class Codes: G06F 11/3072 where the reporting involves data filtering, e.g. pattern matching, time or event triggered, adaptive or policy-based reporting
• CPC Class Codes: G06F 11/3086 where the reporting involves the use of self describing data formats, i.e. metadata, markup languages, human readable formats
• CPC Class Codes: G06F 16/21 Design, administration or maintenance of databases
• CPC Class Codes: G06F 16/2228 Indexing structures
• CPC Class Codes: G06F 16/2455 Query execution
• CPC Class Codes: G06F 16/248 Presentation of query results
• CPC Class Codes: G06F 16/353 into predefined classes
• CPC Class Codes: G06F 16/84 Mapping; Conversion
• CPC Class Codes: G06F 3/04842 Selection of displayed objects or displayed text elements G06F3/0482 takes precedence
• CPC Class Codes: G06F 40/16 Automatic learning of transformation rules, e.g. from examples
• CPC Class Codes: G06F 40/205 Parsing
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files
• CPC Class Codes: G06F 9/542 Event management; Broadcasting; Multicasting; Notifications
• CPC Class Codes: G06N 20/00 Machine learning
• CPC Class Codes: H04L 41/145 involving simulating, designing, planning or modelling of a network
• CPC Class Codes: H04L 41/5074 Handling of user complaints or trouble tickets
• CPC Class Codes: H04L 43/04 : Processing captured monitoring data, e.g. for logfile generation

Abstract

Disclosed is a system, method, and computer program product for implementing a log analytics method and system that can configure, collect, and analyze log records in an efficient manner. The log analytics system, method, and computer program product provide target-based configuration of log monitoring metadata. Variable pathnames (e.g., having variables instead of absolute pathnames) may be specified to identify a directory that contains log files to monitor.

Claims

1. A method implemented with a processor for implementing log file location assignment, comprising:

configuring log source configuration metadata having a pathname expression that corresponds to a plurality of targets having different log file pathnames, the pathname expression comprising both a fixed portion and a varying portion;

identifying a target that is associated with the log source configuration metadata, the target corresponding to one or more target log files to monitor for the target;

replacing one or more parameters within the varying portion of the pathname expression with values corresponding to the one or more target log files for the target; and

collecting the target log files according the log source configuration metadata using the pathname expression where the values for the one or more parameters for the target are included in the pathname expression in place of the varying portion.

2. The method of claim 1, wherein the one or more parameters comprises an included file name pattern or an excluded file name pattern.

3. The method of claim 1, wherein the pathname expression is overridden on a per-target basis using a mapping table that maps an association to a target.

4. The method of claim 1, wherein a target property is established having metadata to define the varying portion of the pathname expression.

5. The method of claim 1, wherein the varying portion of the pathname expression is resolved based upon a specific host for a target.

6. The method of claim 1, wherein a set of fixed selectable parameters is configured for the varying portion of the pathname expression.

7. The method of claim 1, wherein a rule defines a set of sources for the target, along with conditions and actions to be triggered during monitoring of the target.

8. A computer readable medium having stored thereon a sequence of instructions which, when executed by a processor causes the processor to execute a method implemented with a processor for implementing log file location assignment, the method comprising:

configuring log source configuration metadata having a pathname expression that corresponds to a plurality of targets having different log file pathnames, the pathname expression comprising both a fixed portion and a varying portion;

identifying a target that is associated with the log source configuration metadata, the target corresponding to one or more target log files to monitor for the target;

replacing one or more parameters within the varying portion of the pathname expression with values corresponding to the one or more target log files for the target; and

collecting the target log files according the log source configuration metadata using the pathname expression where the values for the one or more parameters for the target are included in the pathname expression in place of the varying portion.

9. The computer readable medium of claim 8, wherein the one or more parameters comprises an included file name pattern or an excluded file name pattern.

10. The computer readable medium of claim 8, wherein the pathname expression is overridden on a per-target basis using a mapping table that maps an association to a target.

11. The computer readable medium of claim 8, wherein a target property is established having metadata to define the varying portion of the pathname expression.

12. The computer readable medium of claim 8, wherein the varying portion of the pathname expression is resolved based upon a specific host for a target.

13. The computer readable medium of claim 8, wherein a set of fixed selectable parameters is configured for the varying portion of the pathname expression.

14. The computer readable medium of claim 8, wherein a rule defines a set of sources for the target, along with conditions and actions to be triggered during monitoring of the target.

15. A system, comprising:

a processor;

a memory having stored thereon a sequence of instructions which, when executed by a processor causes the processor to execute operations comprising;

configuring log source configuration metadata having a pathname expression that corresponds to a plurality of targets having different log file pathnames, the pathname expression comprising both a fixed portion and a varying portion;

identifying a target that is associated with the log source configuration metadata, the target corresponding to one or more target log files to monitor for the target;

replacing one or more parameters within the varying portion of the pathname expression with values corresponding to the one or more target log files for the target; and

collecting the target log files according the log source configuration metadata using the pathname expression where the values for the one or more parameters for the target are included in the pathname expression in place of the varying portion.

16. The system of claim 15, wherein the one or more parameters comprises an included file name pattern or an excluded file name pattern.

17. The system of claim 15, wherein the pathname expression is overridden on a per-target basis using a mapping table that maps an association to a target.

18. The system of claim 15, wherein a target property is established having metadata to define the varying portion of the pathname expression.

19. The system of claim 15, wherein the varying portion of the pathname expression is resolved based upon a specific host for a target.

20. The system of claim 15, wherein a set of fixed selectable parameters is configured for the varying portion of the pathname expression.

21. The system of claim 15, wherein a rule defines a set of sources for the target, along with conditions and actions to be triggered during monitoring of the target.