Server fault analysis system using event logs
AssigneeNetApp, Inc.
InventorsRukma Ameet Talwadker, Ross Ackerman
Life of this patent
Estimating the term…
Abstract
A method and system for server fault analysis are described. A server configuration analyzer retrieves event logs collected from a server with a fault such as a misconfiguration. These event logs can then be analyzed using metrics to identify one or more messages in the logs that indicate a cause of the fault on the server. Once the messages are identified, the server configuration analyzer retrieves remedial commands that may be used to correct the fault from a database that stores remedial commands correlated with event log messages. The server configuration analyzer can then present the messages and remedial commands to a user to assist with identifying the cause of the fault and correcting it.
Claims15
A computing device, comprising:
- a memory containing a machine readable medium comprising machine executable code having stored thereon instructions for efficient resolution of server faults based on an optimized statistical analysis of diagnostic data;
- and
- one or more processors coupled to the memory, the processors configured to execute the machine executable code to:
- retrieve one or more event logs comprising a plurality of messages captured during operation of a server that has experienced a fault;
- identify one of the messages that indicates a cause of the fault based on a ranking of scores assigned to the messages, wherein the one of the messages originates from one of a plurality of server subsystems and one of the scores assigned to the one of the messages is adjusted prior to the ranking based on a group score for the one of the server subsystems determined based on a ratio of a total number of the messages originating from the one of the server subsystems and a total number of the messages originating from the server subsystems;
- and
- execute a command to automatically correct the fault in the server, wherein the command is retrieved based on a stored statistical correlation with the one of the messages.
A method, comprising:
- retrieving, by a computing device, one or more event logs comprising a plurality of messages captured during operation of a server that has experienced a fault;
- identifying, by the computing device, one of the messages that indicates a cause of the fault based on a ranking of scores assigned to the messages, wherein the one of the messages originates from one of a plurality of server subsystems and one of the scores assigned to the one of the messages is adjusted prior to the ranking based on a group score for the one of the server subsystems determined based on a ratio of a total number of the messages originating from the one of the server subsystems and a total number of the messages originating from the server subsystems;
- and
- executing, by the computing device, a command to automatically correct the fault in the server, wherein the command is retrieved based on a stored statistical correlation with the one of the messages.
A non-transitory machine readable medium having stored thereon instructions for efficient resolution of server faults based on an optimized statistical analysis of diagnostic data comprising machine executable code which when executed by at least one machine causes the machine to:
- retrieve one or more event logs comprising a plurality of messages captured during operation of a server that has experienced a fault;
- identify one of the messages that indicates a cause of the fault based on a ranking of scores assigned to the messages, wherein the one of the messages originates from one of a plurality of server subsystems and one of the scores assigned to the one of the messages is adjusted prior to the ranking based on a group score for the one of the server subsystems determined based on a ratio of a total number of the messages originating from the one of the server subsystems and a total number of the messages originating from the server subsystems;
- and
- execute a command to automatically correct the fault in the server, wherein the command is retrieved based on a stored statistical correlation with the one of the messages.
Dependencies are inferred from the claim text.