Log Management System Selective Event Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current logging systems lack flexibility in controlling log event information, unable to selectively log specific events, segment information for different destinations, and filter data before delivery, leading to inefficient logging and limited user access to relevant information.
Innovation Solution
A log management system that selectively generates and delivers log entries to multiple destinations, allowing for filtering, segmentation, and configuration based on user interest, enabling parts of log entries to be sent to different users and destinations in various formats.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If all event information is logged without filtering, then complete information is retained for analysis, but storage space is wasted and logging efficiency decreases
Solution Approach 1:
The patent applies preliminary action by filtering log events before they are written to storage. The system determines which events meet filtering criteria and should be logged, then selectively writes only those events to the log file. This prevents unnecessary data from being stored in the first place, improving logging efficiency while maintaining completeness of relevant information.
Solution Approach 2:
The patent extracts only the necessary log events from the stream of all events by applying filtering criteria. Instead of logging all events and then filtering, the system extracts only those events that meet the specified criteria before logging, thereby reducing storage waste and improving efficiency while preserving complete information about relevant events.
2Loss of substance
If log information is filtered before delivery to a single destination, then only relevant information is stored, but flexibility in delivering different information to different users is lost
Solution Approach 1:
The patent applies segmentation by dividing the logging system into multiple independent log files, each associated with different filtering criteria and destinations. Instead of using a single log file with post-processing filtering, the system segments logs so that different subsets of events are written to different files based on their filtering criteria, enabling flexible delivery to multiple destinations while maintaining storage efficiency.
Solution Approach 2:
The patent adds another dimension to logging by introducing multiple log files and destinations instead of a single destination. This dimensional expansion allows the system to simultaneously maintain multiple filtered views of events, each optimized for specific users or purposes, thereby achieving both storage efficiency and destination flexibility.
3Device complexity
If a single log file is used for all events, then implementation is simple, but user access to specific relevant information becomes inefficient
Solution Approach 1:
The patent segments the logging system into multiple log files organized by filtering criteria and destinations. This segmentation allows users to directly access specific log files containing only the information relevant to their needs, eliminating the time required to search through a single large log file while maintaining manageable complexity through systematic organization.
4Loss of information
If logging captures all event details, then comprehensive analysis is enabled, but system memory and storage constraints are exceeded
Solution Approach 1:
The patent extracts only the necessary log events from the complete event stream by applying filtering criteria before writing to storage. This extraction process ensures that only events meeting specific criteria are persisted, maintaining completeness of relevant information while reducing overall storage memory usage to within system constraints.
Data Source
AI summary
A system and method for managing log entries associated with execution events in an application. The system and method may include a log provider wrapper for receiving log entries associated with the event and log providers for receiving all or part of the information associated with a log entry. The log provider wrapper, through communication with a logging configuration, may filter the log entry, segment information contained in the log entry, format the information, and deliver the information to one or more log providers. The log providers may send the information to a respective destination medium.