System and method supporting log analytics or other log-related functions across multiple systems
AssigneeGoldman, Sachs & Co.
InventorsMatti J. Oikarinen, Atte T. Lahtiranta
Life of this patent
Estimating the term…
Abstract
A method includes receiving a user query identifying one or more criteria associated with logs or log-related information. The method also includes sending queries identifying the one or more criteria to multiple logging systems associated with different computing or networking systems. The method further includes obtaining responses from the logging systems, where at least some of the responses contain one or more logs or log-related information satisfying the one or more criteria. In addition, the method includes presenting the one or more logs or log-related information satisfying the one or more criteria to a user.
Claims21
A method comprising:
- pre-populating a cache system using a subset of logs or log-related information from multiple logging systems associated with different computing or networking systems, wherein the cache system includes a first cache and a second cache;
- receiving a user query identifying one or more criteria associated with the logs or log-related information;
- determining whether one or more logs or log-related information satisfying the one or more criteria is contained in the cache system;
- in response to determining that the one or more logs or log-related information satisfying the one or more criteria is not contained in the cache system, sending queries identifying the one or more criteria to the multiple logging systems;
- obtaining responses from the logging systems, at least some of the responses containing one or more logs or log-related information satisfying the one or more criteria;
- presenting the one or more logs or log-related information satisfying the one or more criteria to a user;
- and
- moving at least some of the subset of logs or log-related information from the first cache to the second cache based on age of the subset of logs or log-related information;
- wherein the cache system is pre-populated prior to receiving the user query;
- and
- wherein the cache system is pre-populated periodically over time at a specified time interval in order to include, in the cache system, logs or log-related information from the multiple logging systems within a most-recent specified time period.
A system comprising:
- at least one processing device configured to:
- pre-populate a cache system using a subset of logs or log-related information from multiple logging systems associated with different computing or networking systems, wherein the cache system includes a first cache and a second cache;
- receive a user query identifying one or more criteria associated with the logs or log-related information;
- determine whether one or more logs or log-related information satisfying the one or more criteria is contained in the cache system;
- in response to determining that the one or more logs or log-related information satisfying the one or more criteria is not contained in the cache system, send queries identifying the one or more criteria to the multiple logging systems;
- obtain responses from the logging systems, at least some of the responses containing one or more logs or log-related information satisfying the one or more criteria;
- present the one or more logs or log-related information satisfying the one or more criteria to a user;
- and
- move at least some of the subset of logs or log-related information from the first cache to the second cache based on age of the subset of logs or log-related information;
- wherein the at least one processing device is configured to pre-populate the cache system prior to receiving the user query;
- and
- wherein the at least one processing device is configured to pre-populate the cache system periodically over time at a specified time interval in order to include, in the cache system, logs or log-related information from the multiple logging systems within a most-recent specified time period.
A non-transitory computer readable medium containing instructions that when executed cause at least one processor to:
- pre-populate a cache system using a subset of logs or log-related information from multiple logging systems associated with different computing or networking systems, wherein the cache system includes a first cache and a second cache;
- receive a user query identifying one or more criteria associated with the logs or log-related information;
- determine whether one or more logs or log-related information satisfying the one or more criteria is contained in the cache system;
- in response to determining that the one or more logs or log-related information satisfying the one or more criteria is not contained in the cache system, send queries identifying the one or more criteria to the multiple logging systems;
- obtain responses from the logging systems, at least some of the responses containing one or more logs or log-related information satisfying the one or more criteria;
- present the one or more logs or log-related information satisfying the one or more criteria to a user;
- and
- move at least some of the subset of logs or log-related information from the first cache to the second cache based on age of the subset of logs or log-related information;
- wherein the instructions when executed cause the at least one processor to pre-populate the cache system prior to receiving the user query;
- and
- wherein the instructions when executed cause the at least one processor to pre-populate the cache system periodically over time at a specified time interval in order to include, in the cache system, logs or log-related information from the multiple logging systems within a most-recent specified time period.
Dependencies are inferred from the claim text.