Log Analysis System Sequence Determination for Correlated Data Aggregation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing log analysis systems cannot effectively aggregate and output logs based on correlations among multiple types of log data, requiring users to manually find related information across different data sets.
Innovation Solution
A log analysis system that includes a sequence determination unit to identify matching sequences in multiple logs and a log aggregation unit to rearrange and output logs based on these sequences, allowing for the aggregation of logs with predetermined correlations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If logs are extracted based on keyword matching only, then extraction simplicity is improved, but correlation analysis capability deteriorates
Solution Approach 1:
The patent segments log analysis into two distinct processes: keyword-based extraction (simple) and sequence-based correlation analysis (advanced). The sequence determination unit separately identifies temporal patterns and correlations among extracted logs, allowing users to first obtain relevant logs through simple keyword matching, then optionally perform deeper correlation analysis on subsets of interest.
Solution Approach 2:
The sequence determination unit acts as an intermediary between keyword extraction and correlation analysis. It takes logs extracted by keyword matching and automatically determines their temporal sequences and correlations, bridging the gap between simple extraction and sophisticated analysis without requiring users to manually perform complex correlation work.
2Measurement precision
If users manually find related parts from multiple types of log data, then correlation analysis accuracy is improved, but operation burden increases
Solution Approach 1:
The system performs self-service by automatically determining sequences and correlations among logs without requiring user intervention. The sequence determination unit autonomously analyzes temporal relationships, identifies correlated logs across multiple data types, and presents aggregated results, eliminating the need for users to manually trace correlations while maintaining high accuracy.
Solution Approach 2:
The patent replaces the mechanical manual process of correlation analysis with an automated computational system. Instead of users manually examining and connecting related logs across different data types, the sequence determination unit uses algorithmic processing to identify temporal patterns and correlations, substituting human cognitive effort with automated information processing.
3Adaptability or versatility
If multiple types of log data are analyzed for correlation, then analysis comprehensiveness is improved, but processing complexity increases
Solution Approach 1:
The patent handles multiple log data types by segmenting the analysis process: first extracting logs relevant to the analysis target using keyword matching, then applying sequence determination only to these extracted logs. This segmentation avoids the complexity of analyzing all available log data simultaneously while still achieving comprehensive correlation analysis for the relevant subset.
Solution Approach 2:
Instead of performing full correlation analysis on all log data from multiple sources, the system applies partial action by focusing sequence determination only on logs that have been pre-filtered by keyword matching. This partial analysis approach reduces processing complexity while maintaining comprehensiveness for the specific analysis target, avoiding unnecessary processing of irrelevant data.
Data Source
AI summary
The present invention provides a log analysis system, a log analysis method, and a log analysis program that can aggregate and output logs having a correlation. A log analyzing system 100 according to one example embodiment of the present invention includes a sequence determination unit 130 that determines which predetermined sequence is matched with a plurality of logs of an analysis target log 10; and a log aggregation unit 140 that, based on the sequence, aggregates and outputs the plurality of logs determined to match the sequence by the sequence determination unit.