Log analysis method and log analysis device

By employing a decomposition, determination, and replacement procedure to separate fixed and variable parts of logs, the method reduces template errors in log parsing, improving the accuracy of log mining and system management tasks.

WO2025173078A1 Publication Date: 2025-08-21NT T INC
5 Cites 0 Cited by

Patent Information

Application Number
PCT/JP2024/004836
Authority / Receiving Office
WO · WO
Patent Type
Applications
Current Assignee / Owner
Filing Date
2024-02-13
Publication Date
2025-08-21

AI Technical Summary

Technical Problem

Existing log parsing methods often result in template errors due to the inclusion of variables in templates, which decreases the accuracy of log mining and affects system management tasks.

Method used

A computer executes a decomposition, determination, and replacement procedure to separate fixed and variable parts of logs using specific separators and criteria, and replaces variable parts with a string indicating variables, thereby reducing template errors.

Benefits of technology

This approach enhances the accuracy of log mining by eliminating template errors, ensuring accurate decomposition of logs into fixed and variable parts.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The present invention reduces template errors due to log parsing by causing a computer to execute: a parsing procedure for parsing, into partial character strings, a portion that can be parsed into a fixed portion and a variable portion which are included in a log, using as a delimiter a blank, a symbol with no alphabet letters or numbers, or a capital alphabet letter; a determination procedure for determining, for each of the partial character strings, whether the partial character string is a variable portion, on the basis of whether the partial character string includes a number in a prescribed mode, or whether the partial character string is present in a prescribed corpus; and a replacement procedure for replacing a partial character string determined to be a variable portion with a character string indicating the variable portion.
Need to check novelty before this filing date? Find Prior Art