US 11,379,421 B1Granted

Generating readable, compressed event trace logs from raw event trace logs

AssigneeAmazon Technologies, Inc.

InventorMircea Ciubotariu

Life of this patent

Estimating the term…

Loading patent…

Abstract

Method and apparatus for compressing raw event logs into smaller readable formats are described. An example includes receiving an uncompressed log file including traces of events executed on a computing system. In the uncompressed log file, a number of consecutive events are identified referencing an action performed with different parameters, and the uncompressed log file is modified by replacing the identified consecutive events with a record indicating that an event has been repeated the number of times. In the modified log file, repeated sequences of events are identified, a compressed log file is generated by replacing, in the modified log file, repeated sequences of events with a record referencing an initial repetition of events and a difference between parameters included in the initial repetition of events and a respective repeated sequence, and the generated compressed log file is output.

Claims15

Dependent claims

A method for compressing log files, comprising:

receiving an uncompressed log file containing traces of events executed on a computing system;
identifying, in the uncompressed log file, consecutive events referencing a system call performed with different parameters;
generating a modified log file by replacing the identified consecutive events in the uncompressed log file with a single entry indicating that the system call has been repeated, wherein the modified log file has a reduced size relative to the uncompressed log file;
identifying repeated sequences of different events in the modified log file, the repeated sequences of different events including a repeated system call identified by the single entry;
generating a compressed log file by replacing, in the modified log file, the repeated sequences of different events with a substitute entry referencing an initial repetition of events and a difference between parameters included in the initial repetition of events and a respective repeated sequence, wherein the compressed log file has a reduced size relative to the modified log file;
and
outputting the generated compressed log file.

4 more elements

Dependencies are inferred from the claim text.