A search method, device and system for log context content

Abstract

An embodiment of the invention provides a system, a device and a method for searching log context contents. The method includes: receiving a context content query request sent by a user on the basis of any log data; searching context contents of the log data according to a sequence identifier and a source identifier of the log data; showing the context contents of the log data to the user. By recording to the sequence identifier and the source identifier of the log data, the context contents of the log data can be searched according to the sequence identifier and the source identifier of the log data, the user is enabled to search the context contents of any log data in searching of the log data, causes and effects of log events can be conveniently positioned according to the searched context contents, and causes of error log data can be determined conveniently once error logs are detected.

Description

technical field [0001] Embodiments of the present invention relate to the technical field of log search, and more specifically, embodiments of the present invention relate to a search method, device and system for log context content. Background technique [0002] This section is intended to provide a background or context for implementations of the invention that are recited in the claims. The descriptions herein are not admitted to be prior art by inclusion in this section. [0003] With the development of big data, the use of big data technology to process data has received more and more attention. Log search is one of the methods of big data mining and analysis. [0004] Log search is the core technology of the unified log service system. The unified log service system is a log service system that integrates distributed log collection, intelligent analysis of logs, centralized index storage of logs, free search of logs, and statistical analysis. , its main principles c...

AI Technical Summary

Problems solved by technology

[0010] In the existing unified log service system, the log data is collected at the collection end, and after a series of processes are finally entered into the search system to establish an index, the original sequence information in the original log file will be lost, for example: during the log data collection process , affected by network transmission, etc., the later log data in the same user server is received by the back-end system first, and the earlier log data is received by the back-end system later, resulting in the loss of the original sequence information in the original log file

Because the unified log service system is a distributed system, the data comes from all directions, which is different from directly viewing a log file in the user server. The loss of sequence information means that all log data in the system are out of order. then the original causality of the log data can no longer be restored

[0011] Therefore, the existing log search system usually only provides functions such as search, viewing, statistics, and analysis of log data. Users cannot view the content associated (context) of a certain log data. Due to the lack of important information in this part (the content associated with the log), users cannot view the cause and effect of log events, and cannot accurately know an error in the program log The reason for the occurrence of log data, which is a huge constraint for users in many scenarios

Images