Centralized Log Analysis with Sanitization and Visualization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The increasing complexity and volume of errors in software systems, coupled with the need for faster resolution and the presence of confidential information in log files, pose challenges for software development teams in efficiently addressing errors and maintaining data security.

Innovation Solution

A system that creates standardized log files across multiple host devices, uploads them to a central server for analysis, and provides a dashboard interface for dynamic data visualization, enabling automatic filtering, indexing, and secure transmission of data to protect sensitive information while allowing for quicker error resolution.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If log files are transmitted to a central server for analysis, then error resolution efficiency is improved, but confidential information security deteriorates

Engineering Contradiction:
Improveerror resolution efficiencyVSAvoidconfidential information security
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts and removes confidential information from log files before transmission to the central server. The system identifies sensitive data patterns (e.g., personal identifiers, proprietary information) and selectively removes or masks them, allowing the log files to be analyzed centrally without compromising security.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces an intermediary processing layer between log generation and central storage. This intermediary component (such as a log agent or preprocessing system) acts as a mediator that sanitizes log data by removing confidential information while preserving error-related details, thus enabling secure centralized analysis.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If errors are addressed one-by-one in order of time or importance, then individual error analysis is thorough, but overall resolution time increases

Engineering Contradiction:
Improveerror analysis thoroughnessVSAvoidoverall resolution time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent merges multiple individual error analyses into a unified centralized processing system. By aggregating log files from multiple sources and analyzing them collectively, the system identifies patterns and correlations across errors, enabling simultaneous resolution of multiple related issues rather than addressing them sequentially.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent creates a universal centralized analysis system that handles multiple error types and sources through a single platform. This multi-functional system can analyze different error categories (performance, security, functional) simultaneously, replacing the need for separate analysis processes for each error type.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Stability of the object's composition

If standardized log files are created across multiple host devices, then data consistency is improved, but system complexity increases

Engineering Contradiction:
Improvedata consistencyVSAvoidsystem complexity
Core Design Contradiction:
Stability of the object's compositionVSDevice complexity

Solution Approach 1:

The patent segments the log standardization process into manageable components: local log agents on individual devices that collect and pre-format logs, a centralized processing system that applies standardization rules, and a unified storage structure. This segmentation allows each component to handle specific tasks, reducing overall system complexity while achieving data consistency.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent applies parameter changes by transforming log data from diverse formats into a standardized structure with consistent fields, data types, and schemas. The system modifies log parameters (timestamps, error codes, severity levels) to conform to uniform standards, enabling consistent analysis across multiple devices without requiring complex manual normalization.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS12147295B2Linking related events for various devices and services in computer log files on a centralized server
Publication Date: 2024.11.19 PALANTIR TECHNOLOGIES INC
  • US12147295B2 patent drawing
  • US12147295B2 patent drawing
  • US12147295B2 patent drawing

AI summary

A system with an interactive user interface for users to view and interact with sanitized log data received from a plurality of hosts, such as those associated with various services of an organization. The system may receive from hosts log files and/or metadata that have been filtered by agents executing on the respective hosts to remove or anonymize any sensitive or confidential information prior to transmission to the system. In some embodiments the system does further filtering of the sanitized data. Received sanitized data is parsed, indexed, and/or otherwise processed for optimal searching, and stored in a log pipeline. The system causes display of an electronic visualization interface.