Method, electronic device, and computer program product for analyzing log file

An electronic device, comprising:

• at least one processing unit;
• and
• at least one memory coupled to the at least one processing unit and storing machine-executable instructions, wherein the instructions, when executed by the at least one processing unit, cause the device to perform actions comprising:
• determining, based at least in part on a plurality of reference patterns, corresponding patterns for a plurality of log records in the log file;
• respectively determining the plurality of log records as a plurality of log identifiers associated with the corresponding patterns;
• determining, from the plurality of log identifiers, a first log identifier associated with a first one of the plurality of log records to be analyzed corresponding to a predetermined event;
• and
• selecting a target reference log identifier from a plurality of reference log identifiers corresponding to the plurality of reference patterns, wherein a first similarity between the target reference log identifier and the first log identifier to be analyzed is higher than a first threshold similarity;
• acquiring a context associated with the first log identifier, the context comprising one or more additional log identifiers associated with one or more additional ones of the plurality of log records collected at least one of before and after the first log record;
• and
• performing a diagnosis of one or more system issues associated with the first log record based at least in part on (i) analyzing a sequence of the first log identifier and the one or more additional log identifiers and (ii) analyzing a predetermined diagnosis strategy of the target reference log identifier.

A computer program product tangibly stored on a non-transitory computer-readable medium and comprising machine-executable instructions, wherein the machine-executable instructions, when executed, cause a machine to perform a method for analyzing a log file, the method comprising:

• determining, based at least in part on a plurality of reference patterns, corresponding patterns for a plurality of log records in the log file;
• respectively determining the plurality of log records as a plurality of log identifiers associated with the corresponding patterns;
• determining, from the plurality of log identifiers, a first log identifier associated with a first one of the plurality of log records to be analyzed corresponding to a predetermined event;
• selecting a target reference log identifier from a plurality of reference log identifiers corresponding to the plurality of reference patterns, wherein a first similarity between the target reference log identifier and the first log identifier to be analyzed is higher than a first threshold similarity;
• acquiring a context associated with the first log identifier, the context comprising one or more additional log identifiers associated with one or more additional ones of the plurality of log records collected at least one of before and after the first log record;
• and
• performing a diagnosis of one or more system issues associated with the first log record based at least in part on (i) analyzing a sequence of the first log identifier and the one or more additional log identifiers and (ii) analyzing a predetermined diagnosis strategy of the target reference log identifier.