Back to results
US 2022/0092062 A1Published application
Method and system for implementing a log parser in a log analytics system
AssigneeOracle International Corporation
InventorGregory Michael Ferrar
Life of this patent
Estimating the term…
Abstract
Disclosed is a system, method, and computer program product for implementing a log analytics method and system that can configure, collect, and analyze log records in an efficient manner. An improved approach has been described to automatically generate a log parser by analysis of the line content of a log. In addition, an efficient approach has been described to extract key-value content from the log content.
Claims20
One or more non-transitory computer readable media storing instructions which, when executed by one or more hardware processors, cause:
- determining that a log rule specifies one or more attributes of targets that the log rule is intended to address, wherein the attributes comprises one or more of:
- (a) a target type of the targets that the log rule is intended to address;
- (b) a source type of log files produced by the targets that the log rule is intended to address;
- and
- (c) a target property of the targets that the log rule is intended to address;
- detecting a first installation of a first log analytics agent onto a first target;
- responsive to detecting the first installation of the first log analytics agent onto the first target:
- determining whether the first target needs to be associated with the log rule;
- and
- responsive to determining that the first target needs to be associated with the log rule:
- generating a first association task associated with the first target and the log rule;
- processing the first association task associated with the first target and the log rule, wherein processing the first association task comprises:
- generating target-side configuration data based on generic configuration data associated with the log rule.
10 more elements
A method comprising:
- determining that a log rule specifies one or more attributes of targets that the log rule is intended to address, wherein the attributes comprises one or more of:
- (a) a target type of the targets that the log rule is intended to address;
- (b) a source type of log files produced by the targets that the log rule is intended to address;
- and
- (c) a target property of the targets that the log rule is intended to address;
- detecting a first installation of a first log analytics agent onto a first target;
- responsive to detecting the first installation of the first log analytics agent onto the first target:
- determining whether the first target needs to be associated with the log rule;
- and
- responsive to determining that the first target needs to be associated with the log rule:
- generating a first association task associated with the first target and the log rule;
- processing the first association task associated with the first target and the log rule, wherein processing the first association task comprises:
- generating target-side configuration data based on generic configuration data associated with the log rule;
- wherein the method is performed by one or more devices, each including one or more hardware processors.
11 more elements
A system comprising:
- one or more devices, each including one or more hardware processors;
- and
- the system being configured to perform operations comprising:
- determining that a log rule specifies one or more attributes of targets that the log rule is intended to address, wherein the attributes comprises one or more of:
- (a) a target type of the targets that the log rule is intended to address;
- (b) a source type of log files produced by the targets that the log rule is intended to address;
- and
- (c) a target property of the targets that the log rule is intended to address;
- detecting a first installation of a first log analytics agent onto a first target;
- responsive to detecting the first installation of the first log analytics agent onto the first target:
- determining whether the first target needs to be associated with the log rule;
- and
- responsive to determining that the first target needs to be associated with the log rule:
- generating a first association task associated with the first target and the log rule;
- processing the first association task associated with the first target and the log rule, wherein processing the first association task comprises:
- generating target-side configuration data based on generic configuration data associated with the log rule.
13 more elements
Dependencies are inferred from the claim text.