Category Information Generation for Log Data Search

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing log summation support apparatuses face inefficiencies in extracting desired communication data due to repeated processing of search conditions for each request, leading to suboptimal search performance.

Innovation Solution

A category information generating apparatus that includes identifier generation, extraction, and reading units to associate measurement identifiers with extracted information, enabling the creation of category information for efficient search processing by classifying log data based on predefined conditions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Quantity of substance

If log information is collected from multiple information processing apparatus and stored, then the quantity of log data increases and comprehensive analysis becomes possible, but the complexity of processing and searching through the log information increases significantly

Engineering Contradiction:
Improvequantity of log dataVSAvoidcomplexity of processing
Core Design Contradiction:
Quantity of substanceVSDevice complexity

Solution Approach 1:

The patent segments log information into multiple categories based on communication protocols (HTTP, FTP, SMTP, POP3, IMAP4, etc.), apparatus types (mail server, web server, terminal device), and other attributes. This segmentation organizes the large quantity of log data into manageable categories, making processing and searching more efficient despite the increased volume of data.

Inventive Principle:
Principle #1Segmentation

2Measurement precision

If search processing is performed on log information for each request, then the accuracy of extracting desired communication data is maintained, but the processing time increases due to repeated processing of the same search conditions

Engineering Contradiction:
Improveaccuracy of extractionVSAvoidprocessing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent performs preliminary classification of log information into categories based on communication protocols, apparatus types, and other attributes before search requests are made. This preliminary action creates an organized structure that enables faster retrieval and reduces the need for repeated processing of the same search conditions, thereby reducing processing time while maintaining extraction accuracy.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent creates category information that serves as a simplified representation or copy of the detailed log information. This category information can be used for initial filtering and search operations, reducing the need to process the full detailed log data for each request, thus decreasing processing time while maintaining the ability to accurately extract desired information.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS10902027B2Generation of category information for measurement value
Publication Date: 2021.01.26 NEC CORP
  • US10902027B2 patent drawing
  • US10902027B2 patent drawing
  • US10902027B2 patent drawing

AI summary

A category information generating apparatus generates a measurement identifier of a measured value with respect to measurement information where the measured value for communication and a resource identifier of an apparatus generating the measured value are associated; extracts, when the resource identifier in the measurement information satisfies a condition regarding the resource identifier in extracted information where a condition for the resource identifier, an extraction item representing an item extracted from the measurement information when the condition is satisfied, and an extracted information identifier of the extraction item are associated, a particular measured value associated with the resource identifier; reads a value representing an extraction item in the extracted information from the particular measured value; and generates category information where a measurement identifier representing the particular measured value, the extracted information identifier in the extracted information, and the read value are associated.