Log analysis method and device based on Apriori algorithm
A log and algorithm technology, applied in the field of big data, can solve problems such as heavy load, and achieve the effects of reducing load, improving efficiency, and improving applicability
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0054] A method of log analysis based on the Apriori algorithm provided in the embodiment of the present application will be further described in detail below in conjunction with the accompanying drawings. The specific implementation of the method may include the following steps (the method flow is as follows: figure 1 shown):
[0055] Step 101, when the server detects the warning information, collect abnormal logs within a preset time window, wherein the abnormal logs refer to logs including preset abnormal keywords.
[0056] A time window may be preset in the server, and the preset time window takes the time point at which the warning message is generated as a reference time, and is a time window of adjustable length. For example, if the duration of the preset time window is three minutes before and after the time point when the warning information is detected, when the server detects the warning information at 14:00, the server will collect the data from 13:57-14:03. A log...
Embodiment 2
[0080] Based on the same inventive concept, the embodiment of the present application also provides a log analysis device based on the Apriori algorithm, see Figure 4 , the device consists of:
[0081] The collection module 401 is configured to collect abnormal logs within a preset time window when warning information is detected, wherein the abnormal logs refer to logs including preset abnormal keywords;
[0082] A processing module 402, configured to preprocess the exception log to obtain a collection of exception logs;
[0083] The determining module 403 is configured to determine a subset whose confidence and support are greater than a preset threshold from the frequent itemsets contained in the set, and use the subset to form an associated event.
[0084] Optionally, the preset time window takes the time point at which the warning message is generated as a reference time, and is a time window of adjustable length.
[0085] Optionally, the processing module 402 is speci...
Embodiment 3
[0095] The embodiment of the present application also provides a server, see Figure 5 , the server includes:
[0096] memory 501, for storing computer instructions;
[0097] The processor 502 is connected to the memory 501 and configured to execute computer instructions in the memory, so as to execute the method as described in Embodiment 1 when executing the computer instructions.
PUM

Abstract
Description
Claims
Application Information

- R&D
- Intellectual Property
- Life Sciences
- Materials
- Tech Scout
- Unparalleled Data Quality
- Higher Quality Content
- 60% Fewer Hallucinations
Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.
© 2025 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com