Back to results
US 7,454,761 B1Granted
Method and apparatus for correlating output of distributed processes
AssigneeCisco Technology, Inc.
InventorsKenneth J. Roberts, Petre Dini, Masum Z. Hasan
Life of this patent
Estimating the term…
Abstract
A method for correlating output of distributed processes includes receiving certain information at a first process of multiple distributed processes that perform one computer application. The information includes a unique identifier for a particular instance of the application that is different from any other identifier for any other instance of the application. The unique identifier is included in data written by the first process to a first data structure. Based on the unique identifier, the data in the first data structure is correlated with data in a different, second data structure written by a different, second process.
Claims21
A method of correlating output of distributed processes related to a computer application, the method comprising the computer-implemented steps of:
- receiving, at an output viewing process output from a first event log file, written by a first process of a plurality of distributed processes that perform one computer application, wherein the first event log file contains first event data including at least one of:
- a first unique identifier for a first instance of the computer application, wherein the first unique identifier is different from any other identifier for any other instance of the computer application;
- and
- a set comprising the first unique identifier and a third unique identifier received from a third process of a plurality of distributed processes, different from the first process;
- receiving, at the output viewing process output from a second event log file written by a second process of the plurality of distributed processes, wherein the second event log file contains second event data including a second unique identifier for a second instance of the computer application, wherein the second unique identifier is different from any other identifier for any other instance of the computer application;
- determining, whether the first event data is correlated with the second event data based on whether the second unique identifier is the same as at least one of the first unique identifier and the third identifier;
- and
- presenting at least a portion of the output from the first event log file and the second event log file in response to determining whether the first event data is correlated with the second event data and based on whether the first unique identifier is the same as the second unique identifier
- wherein each instance of the computer application is associated with no more than one unique identifier.
6 more elements
A computer-readable tangible storage medium carrying one or more sequences of instructions for correlating output of distributed processes related to a computer application, which instructions, when executed by one or more processors, cause the one or more processors to carry out the steps of:
- receiving, at an output viewing process output from a first event log file, written by a first process of a plurality of distributed processes that perform one computer application, wherein the first event log file contains first event data including at least one of:
- a first unique identifier for a first instance of the computer application, wherein the first unique identifier is different from any other identifier for any other instance of the computer application;
- and
- a set comprising the first unique identifier and a third unique identifier received from a third process of a plurality of distributed processes, different from the first process;
- receiving, at the output viewing process output from a second event log file written by a second process of the plurality of distributed processes, wherein the second event log file contains second event data including a second unique identifier for a second instance of the computer application, wherein the second unique identifier is different from any other identifier for any other instance of the computer application;
- determining, whether the first event data is correlated with the second event data based on whether the second unique identifier is the same as at least one of the first unique identifier and the third identifier;
- and
- presenting at least a portion of the output from the first event log file and the second event log file in response to determining whether the first event data is correlated with the second event data and based on whether the first unique identifier is the same as the second unique identifier
- wherein each instance of the computer application is associated with no more than one unique identifier.
6 more elements
An apparatus for correlating output of distributed processes related to a computer application, having one or more processors comprising:
- means for receiving, at an output viewing process output from a first event log file, written by a first process of a plurality of distributed processes that perform one computer application, wherein the first event log file contains first event data including at least one of:
- a first unique identifier for a first instance of the computer application, wherein the first unique identifier is different from any other identifier for any other instance of the computer application;
- and
- a set comprising the first unique identifier and a third unique identifier received from a third process of a plurality of distributed processes, different from the first process;
- means for receiving, at the output viewing process output from a second event log file written by a second process of the plurality of distributed processes, wherein the second event log file contains second event data including a second unique identifier for a second instance of the computer application, wherein the second unique identifier is different from any other identifier for any other instance of the computer application;
- means for determining, whether the first event data is correlated with the second event data based on whether the second unique identifier is the same as at least one of the first unique identifier and the third identifier;
- and
- means for presenting at least a portion of the output from the first event log file and the second event log file in response to determining whether the first event data is correlated with the second event data and based on whether the first unique identifier is the same as the second unique identifier,
- wherein each instance of the computer application is associated with no more than one unique identifier.
6 more elements
An apparatus for creating and storing troubleshooting information for diagnosing one or more problems experienced in one or more completed voice calls that are carried by a packet-switched data network, comprising:
- a network interface that is coupled to the data network for receiving one or more packet flows therefrom;
- a processor;
- one or more stored sequences of instructions which, when executed by the processor, cause the processor to carry out:
- receiving, at an output viewing process output from a first event log file, written by a first process of a plurality of distributed processes that perform one computer application, wherein the first event log file contains first event data including at least one of:
- a first unique identifier for a first instance of the computer application, wherein the first unique identifier is different from any other identifier for any other instance of the computer application;
- and
- a set comprising the first unique identifier and a third unique identifier received from a third process of a plurality of distributed processes, different from the first process;
- receiving, at the output viewing process output from a second event log file written by a second process of the plurality of distributed processes, wherein the second event log file contains second event data including a second unique identifier for a second instance of the computer application, wherein the second unique identifier is different from any other identifier for any other instance of the computer application;
- determining, whether the first event data is correlated with the second event data based on whether the second unique identifier is the same as at least one of the first unique identifier and the third identifier;
- and
- presenting at least a portion of the output from the first event log file and the second event log file in response to determining whether the first event data is correlated with the second event data and based on whether the first unique identifier is the same as the second unique identifier,
- wherein each instance of the computer application is associated with no more than one unique identifier.
9 more elements
Dependencies are inferred from the claim text.