Interaction method, device, equipment, medium and program product

Abstract

The invention provides an interaction method and device, equipment, a medium and a program product. The method can be applied to the technical fields of artificial intelligence and data processing. The interaction method comprises the steps that in response to a log query condition input by a target object, a log file matched with the log query condition is determined, the log file is generated by executing at least part of sub-processes of a business process in response to a business request within a historical time period, and the log file comprises multiple logs; based on the keyword of each log in the log file, a target business flow chart matched with the log file is determined, the target business flow chart is composed of multiple operation process nodes, and the multiple operation process nodes jointly represent the complete execution logic of the business process; the operation process nodes having the mapping relation with all the logs in the log file are configured as interaction nodes in the target service flow chart, the target service flow chart is displayed, and the interaction nodes are used for displaying information related to the logs in response to click operation of the target object.

Description

Technical Field

[0001] This disclosure relates to the fields of artificial intelligence and data processing technology, and specifically to an interactive method, apparatus, device, medium, and program product. Background Technology

[0002] With the widespread adoption of microservices and distributed system architectures, a single business request often needs to traverse multiple different service nodes to complete. During this process, each service generates a large amount of runtime logs, causing the total volume and complexity of system logs to grow exponentially.

[0003] In the process of realizing the concept of this disclosure, at least the following problems were found in the relevant technologies: the operation and maintenance of distributed systems rely on log analysis methods based on technical dimensions. However, when faced with the massive logs mentioned above, this method has limitations. For example, it is difficult to effectively associate technical operation and maintenance data with high-level business logic, resulting in a disconnect between the business logic view and the operation and maintenance data, which makes it inefficient to locate problems from a business perspective. Summary of the Invention

[0004] In view of the above, this disclosure provides an interaction method, apparatus, device, medium, and program product.

[0005] One aspect of this disclosure provides an interaction method, comprising: in response to log query conditions input by a target object, determining a log file matching the log query conditions, the log file being generated within a historical time period in response to a business request and comprising multiple log entries; based on keywords in each log entry in the log file, determining a target business process diagram matching the log file, the target business process diagram comprising multiple operation process nodes, the multiple operation process nodes collectively representing the complete execution logic of the business process; configuring the operation process nodes that have a mapping relationship with each log entry in the log file as interaction nodes in the target business process diagram, and displaying the target business process diagram, the interaction nodes being used to display log-related information in response to click operations by the target object.

[0006] According to embodiments of this disclosure, the log-related information includes basic log information and a control for parsing the basic log information; the interaction method further includes: in response to a click operation of a target object on a target interaction node, displaying the target log basic information and the target control that have a mapping relationship with the target interaction node; in response to a control command of the target object on the target control, calling a preset model so that the preset model parses the target log basic information based on the target business process diagram and displays the parsing result, the parsing result being used to characterize whether the result of executing the sub-process conforms to the predetermined result.

[0007] According to embodiments of this disclosure, there are multiple log files. Each log file is obtained by associating the log records of a uniquely identified business request in different services as the request is transmitted between various services in the distributed system. Among these log files, there may be cases where the target business process diagrams are the same, but the interaction nodes are not completely identical.

[0008] According to embodiments of this disclosure, determining a target business process diagram that matches the log file based on the keywords of each log entry in the log file includes: determining the matching degree between the keywords of each log entry in the log file and any business process diagram in a pre-built set of business process diagrams, wherein multiple operation process nodes in any business process diagram jointly represent the complete execution logic of the historical business process; and determining the target business process diagram from the set of business process diagrams based on the matching degree.

[0009] According to embodiments of this disclosure, determining the matching degree between the keywords of each log entry in the log file and any business process diagram in a pre-built set of business process diagrams includes: determining the number of times the keywords of each log entry in the log file match the business meaning corresponding to each operation process node in any business process diagram; and determining the matching degree between the keywords of each log entry in the log file and any business process diagram based on the number of matches.

[0010] According to embodiments of this disclosure, a business process graph set is pre-built by performing the following operations: collecting multiple historical logs from multiple services of a distributed system, the historical logs including unique identifiers, timestamps, and log text of historical business requests; associating historical logs belonging to the same historical business request, and sorting the associated historical logs based on the timestamps to obtain historical log files corresponding to the historical business requests; mapping the historical logs in the historical log files to sub-processes associated with the execution order based on the multiple log texts in the historical log files corresponding to the historical business requests to obtain process instances corresponding to the historical business requests; aggregating multiple process instances belonging to the same historical business process to obtain a business process graph represented by a tree structure consisting of multiple operation process nodes and edges connecting the operation process nodes, and adding the business process graph to the business process graph set, where operation process nodes represent sub-processes and edges represent the transformation relationships between sub-processes.

[0011] According to embodiments of this disclosure, based on multiple log texts in a historical log file corresponding to a historical business request, the historical logs in the historical log file are mapped to sub-processes associated with the execution order to obtain a process instance corresponding to the historical business request. This includes: extracting keywords from each log text; matching the keywords in each log text with a predefined set of feature words for the sub-process to obtain a matching result; and based on the matching result, sequentially classifying the historical logs in the historical log file into sub-processes with corresponding set of feature words to obtain a process instance corresponding to the historical business request.

[0012] According to embodiments of this disclosure, log query conditions include at least query keywords; in response to log query conditions input by the target object, determining log files that match the log query conditions includes: determining multiple initial logs that match the query keywords; if it is determined that there is a unique identifier for a business request in the multiple initial logs, determining multiple logs that match the unique identifier; and combining the multiple logs to obtain a log file based on the timestamps of the multiple logs.

[0013] Another aspect of this disclosure provides an interactive device, comprising: a first determining module, configured to determine a log file matching the log query conditions in response to a log query condition input by a target object, wherein the log file is generated within a historical time period in response to a business request and at least a portion of a sub-process of a business process, and the log file includes multiple log entries; a second determining module, configured to determine a target business process diagram matching the log file based on keywords of each log entry in the log file, wherein the target business process diagram consists of multiple operation process nodes, and the multiple operation process nodes collectively represent the complete execution logic of the business process; and a display module, configured to configure the operation process nodes that have a mapping relationship with each log entry in the log file as interactive nodes in the target business process diagram, and display the target business process diagram, wherein the interactive nodes are used to display log-related information in response to click operations by the target object.

[0014] Another aspect of this disclosure provides an electronic device comprising: one or more processors; and a memory for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors cause the one or more processors to implement the above-described interaction method.

[0015] Another aspect of this disclosure provides a computer-readable storage medium storing computer-executable instructions that, when executed, implement the above-described interactive method.

[0016] Another aspect of this disclosure provides a computer program product including computer-executable instructions that, when executed, implement the above-described interactive method.

[0017] According to embodiments of this disclosure, a target business process diagram consisting of multiple operation process nodes is determined by querying log files. Then, through the mapping relationship between operation process nodes and logs, the logs are automatically categorized into their respective sub-processes and visualized. This mechanism transforms isolated technical logs into execution sequences with complete business contexts, achieving an upgrade from operational data to business logic. Furthermore, by configuring the operation process nodes corresponding to the matching logs as interactive nodes, the target object can directly read and analyze logs of specific sub-processes on the business process diagram. This upgrades problem localization from traditional keyword searches to visual tracing on the business logic graph, improving analysis efficiency and accuracy. Attached Figure Description

[0018] The above and other objects, features, and advantages of this disclosure will become clearer from the following description of embodiments of the present disclosure with reference to the accompanying drawings, in which:

[0019] Figure 1 The illustrations depict application scenarios of interactive methods, apparatuses, devices, media, and program products according to embodiments of this disclosure.

[0020] Figure 2 A flowchart illustrating an interaction method according to an embodiment of the present disclosure is shown schematically;

[0021] Figure 3 The illustration is a schematic diagram of a target business process according to an embodiment of the present disclosure;

[0022] Figure 4 A schematic diagram illustrating the display analysis results according to an embodiment of the present disclosure is shown;

[0023] Figure 5 A schematic diagram illustrating the determination of log files according to an embodiment of the present disclosure is shown.

[0024] Figure 6 A schematic diagram illustrating a target business process flow according to another embodiment of the present disclosure is shown;

[0025] Figure 7 A schematic diagram illustrating a pre-built business process diagram set according to an embodiment of the present disclosure is shown.

[0026] Figure 8 A block diagram of an interactive device according to an embodiment of the present disclosure is schematically shown; and

[0027] Figure 9 A block diagram of an electronic device suitable for implementing an interaction method according to an embodiment of the present disclosure is shown schematically. Detailed Implementation

[0028] The embodiments of the present disclosure will now be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the disclosure. In the following detailed description, numerous specific details are set forth to provide a thorough understanding of the embodiments of the present disclosure for ease of explanation. However, it will be apparent that one or more embodiments may be practiced without these specific details. Furthermore, descriptions of well-known structures and techniques are omitted in the following description to avoid unnecessarily obscuring the concepts of the present disclosure.

[0029] The terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit this disclosure. The terms “comprising,” “including,” etc., as used herein indicate the presence of features, steps, operations, and / or components, but do not exclude the presence or addition of one or more other features, steps, operations, or components.

[0030] All terms used herein (including technical and scientific terms) have the meanings commonly understood by those skilled in the art, unless otherwise defined. It should be noted that the terms used herein are to be interpreted in a manner consistent with the context of this specification, and not in an idealized or overly rigid way.

[0031] When using expressions such as "at least one of A, B and C", they should generally be interpreted in accordance with the meaning that is commonly understood by those skilled in the art (e.g., "a system having at least one of A, B and C" should include, but is not limited to, a system having A alone, a system having B alone, a system having C alone, a system having A and B, a system having A and C, a system having B and C, and / or a system having A, B and C, etc.).

[0032] In the embodiments disclosed herein, the collection, updating, analysis, processing, use, transmission, provision, disclosure, and storage of data (e.g., including but not limited to user personal information) comply with relevant laws and regulations, are used for legitimate purposes, and do not violate public order and good morals. In particular, necessary measures have been taken to prevent unauthorized access to user personal information data and to safeguard user personal information security and network security.

[0033] In the embodiments disclosed herein, user authorization or consent is obtained before acquiring or collecting user personal information.

[0034] In the process of realizing the concept disclosed herein, it was discovered that the following methods exist for log processing in related technologies:

[0035] Method 1: Use command-line tools to directly view the raw log files. This method is simple to operate, but it is inefficient when dealing with massive amounts of logs in distributed systems, and it is difficult to establish relationships between logs. For example, in Linux systems, commands such as grep -r "error" / var / log / * or tail -f app.log can only perform simple keyword searches on a single log file.

[0036] Method 2: Use a log collection and analysis platform for centralized storage and retrieval of logs. However, this primarily displays logs in text format, lacking semantic understanding of business processes. For example, while Kibana's Discovery page supports complex query syntax, it cannot visualize query results as business process diagrams.

[0037] Method 3: Use self-developed log analysis tools to parse and display logs for specific business scenarios. While this method can meet specific needs, it has high development costs and is difficult to adapt to business changes. For example, an order tracking analysis tool developed by an e-commerce platform can only analyze order-related logs and cannot be extended to other business scenarios.

[0038] It is evident that when faced with massive logs in distributed systems, the log processing methods in related technologies all have limitations.

[0039] In view of this, embodiments of this disclosure provide an interaction method, comprising: responding to log query conditions input by a target object, determining a log file matching the log query conditions, wherein the log file is generated within a historical time period in response to a business request and at least a portion of a sub-process of a business process, and the log file includes multiple logs; determining a target business process diagram matching the log file based on keywords of each log in the log file, wherein the target business process diagram consists of multiple operation process nodes, and the multiple operation process nodes collectively represent the complete execution logic of the business process; configuring the operation process nodes that have a mapping relationship with each log in the log file as interaction nodes in the target business process diagram, and displaying the target business process diagram, wherein the interaction nodes are used to display log-related information in response to click operations of the target object.

[0040] Figure 1 The illustrations depict application scenarios of interactive methods, apparatuses, devices, media, and program products according to embodiments of the present disclosure.

[0041] like Figure 1As shown, application scenario 100 according to this embodiment may include a first terminal device 101, a second terminal device 102, a third terminal device 103, a network 104, and a server 105. The network 104 serves as a medium for providing a communication link between the first terminal device 101, the second terminal device 102, the third terminal device 103, and the server 105. The network 104 may include various connection types, such as wired and / or wireless communication links, etc.

[0042] The target device can use the first terminal device 101, the second terminal device 102, and the third terminal device 103 to interact with the server 105 via the network 104 to receive or send messages, etc. Various communication client applications can be installed on the first terminal device 101, the second terminal device 102, and the third terminal device 103, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, and / or social media platform software, etc. (for example only).

[0043] The first terminal device 101, the second terminal device 102, and the third terminal device 103 can be various electronic devices with displays and support web browsing, including but not limited to smartphones, tablets, laptops, and desktop computers.

[0044] Server 105 can be a server that provides various services, such as a backend management server that supports websites browsed by users using the first terminal device 101, the second terminal device 102, and the third terminal device 103 (this is just an example). The backend management server can analyze and process data such as received user requests, and feed back the processing results (such as web pages, information, or data obtained or generated according to user requests) to the terminal devices.

[0045] It should be noted that the interaction method provided in this embodiment can generally be executed by server 105. Correspondingly, the interaction device provided in this embodiment can generally be located in server 105. The interaction method provided in this embodiment can also be executed by a server or server cluster that is different from server 105 and capable of communicating with the first terminal device 101, the second terminal device 102, the third terminal device 103, and / or server 105. Correspondingly, the interaction device provided in this embodiment can also be located in a server or server cluster that is different from server 105 and capable of communicating with the first terminal device 101, the second terminal device 102, the third terminal device 103, and / or server 105. Alternatively, the interaction method provided in this embodiment can also be executed by the first terminal device 101, the second terminal device 102, and the third terminal device 103, or by other terminal devices different from the first terminal device 101, the second terminal device 102, and the third terminal device 103. Accordingly, the interactive device provided in the embodiments of this disclosure may also be disposed in the first terminal device 101, the second terminal device 102, the third terminal device 103, or in other terminal devices different from the first terminal device 101, the second terminal device 102, and the third terminal device 103.

[0046] It should be understood that Figure 1 The number of terminal devices, networks, and servers shown is merely illustrative. Depending on implementation needs, any number of terminal devices, networks, and servers can be included.

[0047] Figure 2 A flowchart illustrating an interaction method according to an embodiment of this disclosure is shown schematically.

[0048] like Figure 2 As shown, the method includes operations S210 to S230.

[0049] In operation S210, in response to the log query conditions input by the target object, the log file that matches the log query conditions is determined.

[0050] In operation S220, based on the keywords of each log entry in the log file, the target business process diagram that matches the log file is determined.

[0051] In operation S230, the operation process nodes that have a mapping relationship with each log in the log file are configured as interactive nodes in the target business process diagram, and the target business process diagram is displayed.

[0052] In this embodiment, the target object may include, but is not limited to, operations and maintenance personnel, developers, etc. Log query conditions may include, but are not limited to, query time, query keywords, etc.

[0053] Log files can be generated within a historical time period by executing at least a portion of a business process in response to a business request. A log file can contain multiple log entries. Business requests can originate from a business initiator. In response to a business request, the system can execute some or all sub-processes of the business process, recording logs during execution.

[0054] For example, a log platform can centrally store logs generated by multiple services in a distributed system. By querying the time and / or keywords, multiple log entries matching the query time and / or keywords can be retrieved from the log platform. These log entries are then grouped based on unique identifiers, and within each group, they are sequentially combined based on their generation timestamps to obtain a log file.

[0055] The target business process diagram can consist of multiple operation process nodes. These nodes collectively represent the complete execution logic of the business process. Keywords for each log entry in the log file can refer to semantic units extracted from the log text to identify and distinguish the log content. The extraction method is not specifically limited in this disclosure; for example, keywords such as specific business terms, system status, or operation results can be parsed from the log text using natural language processing techniques.

[0056] For example, the set of process feature words of the business process diagram can be obtained in advance and converted into business process vectors. The set of keywords corresponding to the log file can be converted into log vectors. The semantic similarity between the log vectors and each business process vector can be calculated. Then, the business process diagram with the highest semantic similarity can be determined as the target business process diagram.

[0057] Multiple operation process nodes can each represent a sub-process within a business process, and multiple sub-processes combined can represent the complete execution logic. For example, based on the semantic information of each log entry's text, the sub-process information involved in the semantic information can be determined. Operation process nodes are then identified from the target business process diagram based on the sub-process information, thereby establishing a mapping relationship between logs and operation process nodes.

[0058] Interactive nodes can be used to respond to clicks on a target object and display log-related information. This log-related information may include, but is not limited to: log text, timestamp, log name, service name, and log level.

[0059] Figure 3 A schematic diagram illustrating a target business process flow according to an embodiment of the present disclosure is shown.

[0060] like Figure 3As shown, the target user can enter log query conditions in the input box 301 through the interactive interface 300, and then click the query button 302. After receiving the log query conditions, the server executes the above interactive method and displays the target business process diagram 303 including the interactive nodes.

[0061] It should be noted that the above-mentioned disclosure Figure 3 The interactive interface 300, the input box 301, the query button 302 and the target business process diagram 303 shown are merely examples and do not limit the number, shape, size or other aspects of the interactive interface 300, the input box 301, the query button 302 and the target business process diagram 303 disclosed herein.

[0062] The number, location, display format, and external appearance that distinguishes the interactive nodes from the operational process nodes in the target business process diagram 303 disclosed herein are not specifically limited. For example, Figure 3 In the target business process diagram 303, interaction nodes 1, 2, and 3 can be distinguished from the operation process nodes by dashed boxes, but this is not the only method. For example, they can also be distinguished by different colors, etc.

[0063] In the target business process diagram 303, interaction node 1, interaction node 2 and interaction node 3 are all interactive nodes that can be clicked by the target object.

[0064] According to embodiments of this disclosure, a target business process diagram consisting of multiple operation process nodes is determined by querying log files. Then, through the mapping relationship between operation process nodes and logs, the logs are automatically categorized into their respective sub-processes and visualized. This mechanism transforms isolated technical logs into execution sequences with complete business contexts, achieving an upgrade from operational data to business logic. Furthermore, by configuring the operation process nodes corresponding to the matching logs as interactive nodes, the target object can directly read and analyze logs of specific sub-processes on the business process diagram. This upgrades problem localization from traditional keyword searches to visual tracing on the business logic graph, improving analysis efficiency and accuracy.

[0065] The following is for reference. Figures 4-7 In conjunction with specific embodiments, Figure 2 The method shown will be further explained.

[0066] According to another embodiment of this disclosure, log-related information may include basic log information and controls for parsing the basic log information. The basic log information may include, but is not limited to, log text, timestamp, and log name.

[0067] Interaction methods include the above. Figure 2In addition to operations S210 to S230, the following may also be included: responding to a click operation by the target object on the target interaction node, displaying the target log basic information and target control that have a mapping relationship with the target interaction node; responding to the target object's control command on the target control, invoking a preset model so that the preset model parses the target log basic information based on the target business process diagram and displays the parsing results.

[0068] In this embodiment of the disclosure, the parsing result can be used to characterize whether the result of executing the sub-process conforms to the predetermined result.

[0069] Figure 4 A schematic diagram illustrating the analysis results according to an embodiment of the present disclosure is shown.

[0070] like Figure 4 As shown, the target interaction node is based on the above. Figure 3 Taking interactive node 1 as an example, when the target object clicks interactive node 1, the interface will jump to an interface that includes the target log basic information 431 and the target control 432. The target object sends control commands to the target control 432 by clicking. After receiving the control commands, the server can call the preset model and then display the parsing results 433.

[0071] The preset model can include, but is not limited to, a pre-trained large language model. For example, key information can be extracted from basic log information, and the execution result can be judged based on the key information to determine whether it meets the preset result.

[0072] In another example, if the parsed result indicates that the result of the execution of the subprocess does not meet the expected result, a preset model can be used to show the reason for the non-compliance, thereby performing log analysis and fault detection.

[0073] According to embodiments of this disclosure, clicking on a target interactive node can visualize basic information about the target log and the target control. When further log analysis is needed, the target control can be controlled to invoke a preset model, locating the preceding and following stages of the business process containing the target log from the target business process diagram. This achieves integration with the business context, transforming the originally isolated log data into observable information with clear business semantics, which is beneficial for refined monitoring and optimization of the business process.

[0074] Figure 5 A schematic diagram illustrating the determination of a log file according to an embodiment of the present disclosure is shown.

[0075] According to embodiments of this disclosure, log query conditions may include at least query keywords.

[0076] Regarding the above, Figure 2The operation S210 shown, in response to the log query conditions input by the target object, determines the log files that match the log query conditions, which may include, for example... Figure 5 Operations S511 to S515 are shown.

[0077] In operation S511, identify multiple initial log entries that match the query keywords.

[0078] In operation S512, determine whether a unique identifier for a business request exists among multiple initial log entries. If yes, execute operations S513 and S514; otherwise, execute operation S515.

[0079] In operation S513, identify multiple log entries that match a unique identifier.

[0080] When operating S514, multiple log entries are combined to obtain a log file based on their timestamps.

[0081] When operating S515, multiple initial logs are combined to obtain a log file based on their timestamps.

[0082] In embodiments of this disclosure, logs can be recorded from various services of a distributed system and stored in a log platform. Then, multiple initial log entries matching the query keywords are matched from the log platform.

[0083] The unique identifier can include a globally unique trace identifier generated when a business request enters the distributed system. This trace identifier can be carried when generating logs in response to a business request. This allows logs from various services within the distributed system to be correlated.

[0084] Multiple initial log entries can have the same unique identifier, different unique identifiers, or no unique identifier. For example, if the unique identifiers are the same, the resulting log file can be a single file; if the unique identifiers are also the same, the number of log files can be determined based on the number of unique identifiers.

[0085] According to embodiments of this disclosure, by using a unique identifier for the business request in the initial log, a secondary query can be performed using this unique identifier to obtain all logs generated when responding to business requests with the same unique identifier, thus ensuring the integrity of the log file. Furthermore, the log file obtained by combining logs based on timestamps can reconstruct the execution order of the business process.

[0086] Figure 6 A schematic diagram illustrating a target business process flow according to another embodiment of the present disclosure is shown.

[0087] According to embodiments of this disclosure, log files may include multiple log files. Each log file is obtained by associating the log records of a uniquely identified business request across different services in a distributed system as the request is transmitted. Multiple log files may correspond to the same target business process diagram, but their interaction nodes may not be entirely identical.

[0088] For example, when a business request is a payment request, a distributed system may involve multiple services such as orders, inventory, and payment. Log records from these multiple services can be linked together to obtain a log file.

[0089] Among the multiple log files retrieved using log query criteria, each log file corresponds to a different business request. Given these different business requests, the sub-processes executed in response to those requests differ. Therefore, each log file can be associated with a target business process. Figure 1 There is a one-to-one correspondence, and the target business process diagram contains the same sub-processes, but the interaction nodes are different, such as... Figure 6 As shown, taking two log files as an example, the first target business process diagram 601 and the second target business process diagram 602 can be determined and displayed in the interactive interface 600. The complete execution logic of the first target business process diagram 601 and the second target business process diagram 602 is the same, but the interaction nodes in the first target business process diagram 601 are interaction node 1, interaction node 2, and interaction node 3, while the interaction nodes in the second target business process diagram 602 are interaction node 1, interaction node 4, interaction node 5, interaction node 2, and interaction node 3. An interaction node can be an operation process node corresponding to a sub-process executed in response to a business request. Therefore, the operation process nodes corresponding to the sub-processes executed in the first target business process diagram 601 and the second target business process diagram 602 are different.

[0090] According to embodiments of this disclosure, by associating log records from different services into log files and then visualizing each log culture, differentiated presentation and comparative analysis of the actual execution paths of different business requests under the same business process are achieved.

[0091] According to embodiments of this disclosure, regarding the above-mentioned... Figure 2 The operation S220 shown, which determines the target business process diagram that matches the log file based on the keywords of each log entry in the log file, may include the following operations: determining the matching degree between the keywords of each log entry in the log file and any business process diagram in the pre-built business process diagram set; and determining the target business process diagram from the business process diagram set based on the matching degree.

[0092] In the embodiments of this disclosure, multiple operation process nodes in any business process diagram collectively represent the complete execution logic of a historical business process.

[0093] For example, for any business process diagram in the business process diagram set, the matching degree between the keywords of each log in the log file and the business process diagram can be summed to obtain the total matching degree. The business process diagram with the highest total matching degree is then determined as the target business process diagram.

[0094] According to embodiments of this disclosure, the matching accuracy of the target business process diagram can be improved by comparing the keywords of each log entry in the log file with any business process diagram in a pre-built set of business process diagrams.

[0095] For example, determining the matching degree between the keywords of each log entry in the log file and any business process diagram in a pre-built set of business process diagrams may include the following operation: determining the number of times the keywords of each log entry in the log file match the business meaning corresponding to each operation process node in any business process diagram. Based on the number of matches, the matching degree between the keywords of each log entry in the log file and any business process diagram is determined.

[0096] For example, key information from the sub-businesses corresponding to each operation process node in any business process diagram can be extracted. Then, the number of times the keywords and key information in each log entry in the log file match in terms of business meaning can be counted, and this number can be determined as the matching degree.

[0097] According to embodiments of this disclosure, since the keywords of each log entry in the log file match the business meanings corresponding to each operation process node in any business process diagram, matching errors caused by inconsistent expressions can be avoided.

[0098] According to embodiments of this disclosure, multiple historical logs can be collected from multiple services of a distributed system; historical logs belonging to the same historical business request can be associated, and the associated historical logs can be sorted based on timestamps to obtain historical log files corresponding to the historical business requests; based on multiple log texts in the historical log files corresponding to the historical business requests, the historical logs in the historical log files can be mapped to sub-processes associated with the execution order to obtain process instances corresponding to the historical business requests; multiple process instances belonging to the same historical business process can be aggregated to obtain a business process graph represented by a tree structure consisting of multiple operation process nodes and edges connecting the operation process nodes, and the business process graph can be added to a business process graph set.

[0099] In this embodiment of the disclosure, the historical log may include a unique identifier, timestamp, and log text of the historical business request. Operation flow nodes can represent sub-processes, and edges can represent the transformation relationships between sub-processes.

[0100] Historical business processes can characterize all possible complete business logic that can be executed.

[0101] Figure 7 A schematic diagram of a pre-built business process diagram set according to an embodiment of the present disclosure is shown.

[0102] like Figure 7 As shown, multiple historical logs 710 can be collected from the first service 701, ..., the Nth service 70N. Based on historical business requests, the multiple historical logs 710 are classified to obtain the first historical log set 721, ..., the Mth historical log set 72M corresponding to the first historical business request. For any set of historical logs: the historical logs in the set can be sorted based on timestamps to obtain the first historical log file 731, ..., the Mth historical log file 73M. The historical logs in the first historical log file 731, ..., the Mth historical log file 73M are mapped to sub-processes associated with the execution order to obtain the first process instance 741, ..., the Mth process instance 74M. Based on historical business processes, multiple process instances belonging to the same historical business process in the first process instance 741, ..., the Mth process instance 74M are grouped together to obtain the first process instance set 751, ..., the Kth process instance set 75K. The process instances corresponding to the first process instance set 751, ..., and the Kth process instance set 75K are aggregated to obtain the first business process diagram 761, ..., and the Kth business process diagram 76K. The first business process diagram 761, ..., and the Kth business process diagram 76K are used as the business process diagram set 760.

[0103] It should be noted that N, M, and K in the above examples are all positive integers. N and M can be equal or unequal, and K ≤ M.

[0104] According to embodiments of this disclosure, associating and sorting historical logs belonging to the same historical business request across multiple services can overcome the problem of missing correlation caused by scattered logs, laying the foundation for building a complete request chain. Furthermore, aggregating multiple process instances belonging to the same historical business process into a business process diagram reflecting the actual business logic at least partially solves the limitation of missing business semantics in traditional logging tools.

[0105] Exemplarily, based on multiple log texts in a historical log file corresponding to a historical business request, mapping the historical logs in the historical log file to subprocesses associated with an execution order to obtain a process instance corresponding to the historical business request may include operations: extracting keywords in each log text. Matching the keywords in each log text with a set of characteristic words of a predefined subprocess to obtain a matching result. Based on the matching result, classifying the historical logs in the historical log file into subprocesses with corresponding sets of characteristic words in sequence to obtain a process instance corresponding to the historical business request.

[0106] In the embodiments of the present disclosure, the method for extracting keywords in each log text is not specifically limited. For example, meaningful words can be extracted from the log text, and meaningless stop words such as "de" (的), "le" (了), etc. can be removed, and specific error codes, service names, method names, status words, etc. in the log can be extracted.

[0107] For each operation process node corresponding to a subprocess, there is a predefined set of characteristic words, and these characteristic words can uniquely or with high probability identify the subprocess. For example, for the "Payment" subprocess, the characteristic words may include "Payment", "Deduction", "Transaction", etc. The method for matching keywords with the set of characteristic words is not specifically limited in the present disclosure. For example, semantic matching between words, text similarity matching between words, etc. can be performed. The log can be assigned to the subprocess with the highest matching degree.

[0108] A subprocess can be a step or link in a historical business process and is predefined and static. For example, in an order processing process, there may be subprocesses such as "Create Order", "Deduce Inventory", "Payment", etc. A process instance refers to a specific historical business request. For example, a specific order, when actually executed in a historical business process, is a sequence of instantiations of a series of subprocesses and is dynamic.

[0109] Each log can be mapped to a subprocess, and then, these mapped subprocesses are arranged in the time order of the logs to obtain a process instance.

[0110] According to the embodiments of the present disclosure, by means of a keyword matching mechanism, discrete logs are accurately classified into subprocesses of a business process, realizing an automated conversion from unstructured log data to a structured process instance, and building a data foundation for subsequent business process analysis.

[0111] According to another embodiment of this disclosure, the target object can initiate a pre-query request to the backend device through the frontend device. After receiving the pre-query request, the backend device can obtain a predefined set of feature words for sub-processes, keywords for logs, etc. from the configuration platform, and then feed them back to the frontend device. The frontend device can display these configurations in the drop-down box of the input box to facilitate the target object's query.

[0112] The target object can be interacted with via front-end devices. Using the aforementioned interaction methods, a visualized business process diagram mapped with logs can be queried, and the target logs can also be analyzed. This achieves a paradigm shift from technical operations and maintenance to business insight. For example, the visualized traceability capabilities provided by the interaction methods disclosed herein can intuitively present the actual business execution status and abnormal paths, and support fine-grained monitoring of each node in the business process. When a business anomaly occurs, the system supports efficient backtracking analysis along the business path, quickly locating the faulty link, thereby directly linking technical errors with business impact, significantly improving the accuracy and efficiency of fault diagnosis.

[0113] Figure 8 A block diagram of an interactive device according to an embodiment of the present disclosure is shown schematically.

[0114] like Figure 8 As shown, the interactive device 800 includes a first determining module 810, a second determining module 820, and a display module 830.

[0115] The first determining module 810 is used to determine the log file that matches the log query conditions input by the target object. The log file is generated by at least a part of the sub-process of the business process executed in response to the business request within a historical time period. The log file includes multiple logs.

[0116] The second determining module 820 is used to determine the target business process diagram that matches the log file based on the keywords of each log entry in the log file. The target business process diagram consists of multiple operation process nodes, which together represent the complete execution logic of the business process.

[0117] The display module 830 is used to configure the operation flow nodes that have a mapping relationship with each log in the log file as interactive nodes in the target business process diagram and display the target business process diagram. The interactive nodes are used to respond to the click operation of the target object and display information related to the log.

[0118] According to embodiments of this disclosure, log-related information includes basic log information and controls for parsing the basic log information. The interactive device 800 further includes an information display module and a parsing module. The information display module is used to display the target log information and the target controls that have a mapping relationship with the target interactive node in response to a click operation by a target object on a target interactive node. The parsing module is used to invoke a preset model in response to a control command from a target object on the target controls, so that the preset model parses the target log information based on the target business process diagram and displays the parsing results. The parsing results are used to characterize whether the result of executing the sub-process conforms to the predetermined result.

[0119] According to embodiments of this disclosure, there are multiple log files. Each log file is obtained by associating the log records of a uniquely identified business request across different services in a distributed system. While the target business process diagrams corresponding to the multiple log files may be identical, the interaction nodes may not be entirely the same.

[0120] According to embodiments of this disclosure, the second determining module 820 includes a first sub-determining unit and a second sub-determining unit. The first sub-determining unit is used to determine the matching degree between keywords of each log entry in the log file and any business process diagram in a pre-built business process diagram set, where multiple operation process nodes in any business process diagram collectively represent the complete execution logic of a historical business process. The second sub-determining unit is used to determine a target business process diagram from the business process diagram set based on the matching degree.

[0121] According to embodiments of this disclosure, determining the matching degree between keywords of each log entry in the log file and any business process diagram in a pre-built set of business process diagrams includes: determining the number of times keywords of each log entry in the log file match the business meaning corresponding to each operation process node in any business process diagram. Based on the number of matches, the matching degree between keywords of each log entry in the log file and any business process diagram is determined.

[0122] According to embodiments of this disclosure, a business process graph set is pre-built by performing the following operations: Multiple historical logs are collected from multiple services of a distributed system. These historical logs include unique identifiers, timestamps, and log text for historical business requests. Historical logs belonging to the same historical business request are associated, and the associated historical logs are sorted based on their timestamps to obtain historical log files corresponding to the historical business requests. Based on the multiple log texts in the historical log files corresponding to the historical business requests, the historical logs in the historical log files are mapped to sub-processes associated with their execution order to obtain process instances corresponding to the historical business requests. Multiple process instances belonging to the same historical business process are aggregated to obtain a business process graph represented by a tree structure consisting of multiple operation process nodes and edges connecting the operation process nodes. This business process graph is then added to the business process graph set, where operation process nodes represent sub-processes, and edges represent the transformation relationships between sub-processes.

[0123] According to embodiments of this disclosure, based on multiple log texts in a historical log file corresponding to a historical business request, historical logs in the historical log file are mapped to sub-processes associated with the execution order to obtain a process instance corresponding to the historical business request. This includes: extracting keywords from each log text; matching the keywords in each log text with a predefined set of feature words for the sub-process to obtain a matching result; and based on the matching result, sequentially classifying the historical logs in the historical log file into sub-processes with corresponding set of feature words to obtain a process instance corresponding to the historical business request.

[0124] According to embodiments of this disclosure, log query conditions include at least query keywords. The first determining module 810 includes a third sub-determining unit, a fourth sub-determining unit, and a combining unit. The third sub-determining unit is used to determine multiple initial logs matching the query keywords. The fourth sub-determining unit is used to determine multiple logs matching the unique identifier if a unique identifier for a business request exists among the multiple initial logs. The combining unit is used to combine the multiple logs into a log file based on their timestamps.

[0125] Any one or more of the modules, submodules, units, and subunits according to embodiments of the present disclosure, or at least part of the functions of any one or more of them, can be implemented in one module. Any one or more of the modules, submodules, units, and subunits according to embodiments of the present disclosure can be implemented by dividing them into multiple modules. Any one or more of the modules, submodules, units, and subunits according to embodiments of the present disclosure can be at least partially implemented as hardware circuitry, such as a Field-Programmable Gate Array (FPGA), a Programmable Logic Array (PLA), a System-on-Chip, a System-on-a-Substrate, a System-on-Package, an Application-Specific Integrated Circuit (ASIC), or implemented in hardware or firmware by any other reasonable means of integrating or packaging circuitry, or implemented in software, hardware, or firmware, or in any suitable combination of any of these three implementation methods. Alternatively, one or more of the modules, submodules, units, and subunits according to embodiments of the present disclosure can be at least partially implemented as computer program modules, which, when run, can perform corresponding functions.

[0126] For example, any plurality of the first determining module 810, the second determining module 820, and the display module 830 can be combined into one module / unit / subunit, or any one of these modules / units / subunits can be split into multiple modules / units / subunits. Alternatively, at least part of the functionality of one or more of these modules / units / subunits can be combined with at least part of the functionality of other modules / units / subunits and implemented in one module / unit / subunit. According to embodiments of this disclosure, at least one of the first determining module 810, the second determining module 820, and the display module 830 can be at least partially implemented as hardware circuitry, such as a field-programmable gate array (FPGA), a programmable logic array (PLA), a system-on-a-chip, a system-on-a-substrate, a system-on-package, an application-specific integrated circuit (ASIC), or any other reasonable means of integrating or packaging circuitry, or implemented in software, hardware, or firmware, or in any one of the three implementation methods or a suitable combination of any of them. Alternatively, at least one of the first determining module 810, the second determining module 820, and the display module 830 may be implemented at least partially as a computer program module, which can perform corresponding functions when the computer program module is run.

[0127] It should be noted that the interactive device part in the embodiments of this disclosure corresponds to the interactive method part in the embodiments of this disclosure. The specific description of the interactive device part is referred to in the interactive method part, and will not be repeated here.

[0128] Figure 9 A block diagram of an electronic device suitable for implementing an interaction method according to an embodiment of the present disclosure is shown schematically. Figure 9 The electronic device shown is merely an example and should not be construed as limiting the functionality and scope of the embodiments disclosed herein.

[0129] like Figure 9 As shown, an electronic device 900 according to an embodiment of the present disclosure includes a processor 901, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 902 or a program loaded from a storage portion 908 into a random access memory (RAM) 903. The processor 901 may include, for example, a general-purpose microprocessor (e.g., a CPU), an instruction set processor and / or an associated chipset and / or a special-purpose microprocessor (e.g., an application-specific integrated circuit (ASIC)), etc. The processor 901 may also include onboard memory for caching purposes. The processor 901 may include a single processing unit or multiple processing units for performing different actions of the method flow according to an embodiment of the present disclosure.

[0130] RAM 903 stores various programs and data required for the operation of electronic device 900. Processor 901, ROM 902, and RAM 903 are interconnected via bus 904. Processor 901 performs various operations of the method flow according to embodiments of the present disclosure by executing programs in ROM 902 and / or RAM 903. It should be noted that programs may also be stored in one or more memories other than ROM 902 and RAM 903. Processor 901 may also perform various operations of the method flow according to embodiments of the present disclosure by executing programs stored in one or more memories.

[0131] According to embodiments of this disclosure, the electronic device 900 may further include an input / output (I / O) interface 905, which is also connected to a bus 904. The electronic device 900 may also include one or more of the following components connected to the input / output (I / O) interface 905: an input section 906 including a keyboard, mouse, etc.; an output section 907 including a cathode ray tube (CRT), liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 908 including a hard disk, etc.; and a communication section 909 including a network interface card such as a LAN card, modem, etc. The communication section 909 performs communication processing via a network such as the Internet. A drive 910 is also connected to the input / output (I / O) interface 905 as needed. A removable medium 911, such as a disk, optical disk, magneto-optical disk, semiconductor memory, etc., is installed on the drive 910 as needed so that computer programs read from it can be installed into the storage section 908 as needed.

[0132] According to embodiments of this disclosure, the method flow according to embodiments of this disclosure can be implemented as a computer software program. For example, embodiments of this disclosure include a computer program product comprising a computer program carried on a computer-readable storage medium, the computer program containing program code for performing the methods shown in the flowchart. In such embodiments, the computer program can be downloaded and installed from a network via communication section 909, and / or installed from removable medium 911. When the computer program is executed by processor 901, it performs the functions defined in the system of embodiments of this disclosure. According to embodiments of this disclosure, the systems, devices, apparatuses, modules, units, etc., described above can be implemented by computer program modules.

[0133] This disclosure also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments; or it may exist independently and not assembled into the device / apparatus / system. The computer-readable storage medium carries one or more programs that, when executed, implement the method according to the embodiments of this disclosure.

[0134] According to embodiments of this disclosure, the computer-readable storage medium can be a non-volatile computer-readable storage medium. Examples include, but are not limited to: portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof. In this disclosure, the computer-readable storage medium can be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, apparatus, or device.

[0135] For example, according to embodiments of this disclosure, a computer-readable storage medium may include the ROM 902 and / or RAM 903 described above and / or one or more memories other than ROM 902 and RAM 903.

[0136] Embodiments of this disclosure also include a computer program product comprising a computer program containing program code for performing the methods provided in the embodiments of this disclosure. When the computer program product is run on an electronic device, the program code is used to enable the electronic device to implement the interactive methods provided in the embodiments of this disclosure.

[0137] When the computer program is executed by the processor 901, it performs the functions defined in the system / apparatus of this disclosure embodiments. According to embodiments of this disclosure, the systems, apparatuses, modules, units, etc., described above can be implemented by computer program modules.

[0138] In one embodiment, the computer program may rely on a tangible storage medium such as an optical storage device or a magnetic storage device. In another embodiment, the computer program may also be transmitted and distributed in the form of signals over a network medium, and downloaded and installed via the communication section 909, and / or installed from a removable medium 911. The program code contained in the computer program can be transmitted using any suitable network medium, including but not limited to: wireless, wired, etc., or any suitable combination thereof.

[0139] According to embodiments of this disclosure, program code for executing the computer programs provided in embodiments of this disclosure can be written in any combination of one or more programming languages. Specifically, these computational programs can be implemented using high-level procedural and / or object-oriented programming languages, and / or assembly / machine languages. Programming languages ​​include, but are not limited to, languages ​​such as Java, C++, Python, "C", or similar programming languages. The program code can execute entirely on a user's computing device, partially on a user's device, partially on a remote computing device, or entirely on a remote computing device or server. In cases involving remote computing devices, the remote computing device can be connected to the user's computing device via any type of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computing device (e.g., via the Internet using an Internet service provider).

[0140] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of the present disclosure. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in a block diagram or flowchart, and combinations of blocks in a block diagram or flowchart, may be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions. Those skilled in the art will understand that the features described in the various embodiments of the present disclosure can be combined and / or combined in various ways, even if such combinations are not explicitly described in the present disclosure. In particular, the features described in the various embodiments of this disclosure may be combined and / or combined in various ways without departing from the spirit and teachings of this disclosure. All such combinations and / or combinations fall within the scope of this disclosure.

[0141] The embodiments of this disclosure have been described above. However, these embodiments are for illustrative purposes only and are not intended to limit the scope of this disclosure. Although various embodiments have been described above, this does not mean that the measures in the various embodiments cannot be used advantageously in combination. Various substitutions and modifications can be made by those skilled in the art without departing from the scope of this disclosure, and all such substitutions and modifications should fall within the scope of this disclosure.

Claims

1. An interaction method, comprising: In response to the log query conditions input by the target object, a log file matching the log query conditions is determined. The log file is generated within a historical time period in response to a business request and includes at least a portion of a sub-process of the business process. Based on the keywords of each log entry in the log file, a target business process diagram matching the log file is determined. The target business process diagram consists of multiple operation process nodes, which together represent the complete execution logic of the business process. The operation flow nodes that have a mapping relationship with each log in the log file are configured as interactive nodes in the target business process diagram and the target business process diagram is displayed. The interactive nodes are used to respond to the click operation of the target object and display information related to the log.

2. The method according to claim 1, wherein: The information related to the log includes basic log information and controls for parsing the basic log information; The method further includes: In response to the target object's click operation on the target interaction node, display the target log basic information and target control that have a mapping relationship with the target interaction node; In response to the control command of the target object on the target control, a preset model is invoked so that the preset model parses the basic information of the target log based on the target business process diagram and displays the parsing result. The parsing result is used to characterize whether the result of executing the sub-process meets the predetermined result.

3. The method according to claim 1 or 2, wherein: The log files include multiple files, each of which is obtained by associating the log records of the uniquely identified business requests in different services as they are transmitted between various services in the distributed system. Among them, there are cases where the target business process diagrams of multiple log files are the same, but the interaction nodes are not exactly the same.

4. The method according to claim 3, wherein: The step of determining the target business process diagram that matches the log file based on the keywords of each log entry in the log file includes: Determine the matching degree between the keywords of each log entry in the log file and any business process diagram in the pre-built business process diagram set, wherein multiple operation process nodes in any business process diagram jointly represent the complete execution logic of the historical business process; Based on the matching degree, the target business process diagram is determined from the set of business process diagrams.

5. The method according to claim 4, wherein: Determining the matching degree between the keywords of each log entry in the log file and any business process diagram in the pre-built business process diagram set includes: Determine the number of times the keywords of each log entry in the log file match the business meaning corresponding to each operation process node in any business process diagram; Based on the number of times, determine the matching degree between the keywords of each log entry in the log file and any of the business process diagrams.

6. The method according to claim 4, wherein: The business process diagram set is pre-built by performing the following operations: Multiple historical logs are collected from multiple services in a distributed system. The historical logs include unique identifiers, timestamps, and log text of historical business requests. The historical logs belonging to the same historical business request are associated, and the associated historical logs are sorted based on the timestamp to obtain the historical log file corresponding to the historical business request. Based on multiple log texts in the historical log file corresponding to the historical business request, the historical logs in the historical log file are mapped to the sub-processes associated with the execution order to obtain the process instance corresponding to the historical business request. Multiple process instances belonging to the same historical business process are aggregated to obtain the business process graph represented by a tree structure consisting of multiple operation process nodes and edges connecting the operation process nodes. The business process graph is then added to the business process graph set. The operation process nodes represent sub-processes, and the edges represent the transformation relationship between sub-processes.

7. The method according to claim 6, wherein: The step of mapping historical logs in the historical log file corresponding to the historical business request to sub-processes associated with the execution order based on multiple log texts in the historical log file to obtain a process instance corresponding to the historical business request includes: Extract keywords from each of the log texts; The keywords in each log text are matched with a predefined set of feature words for the sub-process to obtain the matching results; Based on the matching results, the historical logs in the historical log files are sequentially categorized into sub-processes with corresponding feature word sets to obtain process instances corresponding to the historical business requests.

8. The method according to claim 1 or 2, wherein: The log query criteria must include at least the query keywords; The step of determining the log file that matches the log query condition input by the target object includes: Identify multiple initial log entries that match the query keywords; If it is determined that a unique identifier for the business request exists in the multiple initial logs, then multiple logs that match the unique identifier are identified. The log file is obtained by combining the multiple log entries based on their timestamps.

9. An interactive device, comprising: The first determining module is used to determine the log file that matches the log query conditions input by the target object in response to the log query conditions. The log file is generated by at least a part of the sub-process of the business process executed in response to the business request within a historical time period. The log file includes multiple logs. The second determining module is used to determine a target business process diagram that matches the log file based on the keywords of each log entry in the log file. The target business process diagram consists of multiple operation process nodes, which together represent the complete execution logic of the business process. The display module is used to configure the operation flow nodes that have a mapping relationship with each log in the log file as interactive nodes in the target business process diagram, and to display the target business process diagram. The interactive nodes are used to respond to the click operation of the target object and display information related to the log.

10. An electronic device, comprising: One or more processors; Memory, used to store one or more programs. Wherein, when the one or more programs are executed by the one or more processors, the one or more processors implement the method of any one of claims 1 to 8.

11. A computer-readable storage medium having stored thereon executable instructions that, when executed by a processor, cause the processor to perform the method of any one of claims 1 to 8.

12. A computer program product comprising a computer program that, when executed by a processor, implements the method according to any one of claims 1-8.

Images