Log Parsing State Machine for Configuration Change Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In virtualized environments, there is a lack of tools to identify whether user-defined configuration changes have been realized across multiple computing platforms and the time it takes for these changes to be implemented, making it difficult to verify the effectiveness of configuration changes such as publishing a logical firewall or persisting a firewall rule.
Innovation Solution
A method that involves parsing log messages from computing systems to identify events associated with configuration changes, using a state machine to verify the occurrence of subsequent events in a predefined order, and generating reports to indicate the realization of configuration changes, including timestamps and runtime values, to assess the realization of configuration changes and build timelines.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If configuration changes are propagated to multiple computing platforms in a virtualized environment, then the configuration changes are enforced across the data center, but there is no way to verify whether the changes have actually been realized or measure the time taken for realization
Solution Approach 1:
The patent implements a feedback mechanism by collecting log messages from computing platforms and analyzing them to determine whether configuration changes have been realized. The system parses logs to identify events corresponding to configuration changes and their outcomes, providing verification feedback to users about the actual realization status of propagated configuration changes across the virtualized environment.
Solution Approach 2:
The patent introduces an intermediary monitoring system that acts as a mediator between the configuration propagation process and users. This intermediary system collects and analyzes log messages from multiple computing platforms, translating raw log data into meaningful realization status information and timing data, thereby enabling verification without direct access to each platform's internal state.
2Measurement precision
If log messages are parsed from multiple computing systems to identify configuration change events, then realization status can be determined, but the complexity of parsing and analyzing logs from multiple sources increases
Solution Approach 1:
The patent applies segmentation by dividing the log parsing process into distinct components: collecting log messages from multiple computing platforms, parsing individual logs to identify configuration change events, and analyzing the parsed data to determine realization status. This segmentation allows the system to handle complexity modularly, processing logs from each platform independently before aggregating results.
Solution Approach 2:
The patent implements a universal log parsing approach that can handle logs from multiple different computing platforms and virtualization environments through a single standardized process. The parsing system is designed to identify configuration change events across diverse log formats and sources, providing multi-functional capability that reduces the need for platform-specific analysis tools.
Data Source
AI summary
Techniques disclosed herein provide an approach for assessing configuration change realization and building timelines. In one embodiment, an event parser parses relevant log(s) of a computing system to identify events of interest therein and associated tasks. Examples of tasks include publishing a firewall or persisting a firewall rule, each of which may involve multiple events in a particular order. Upon identifying an initial event of a task, the event parser instantiates a state machine associated with the task to verify the occurrence of subsequent events in the task in the appropriate order. The event parser may verify whether configuration changes made by a user have been realized in the system based on the completion of tasks associated with the configuration changes. In addition, data associated with tasks may be persisted in a datastore and used to generate reports.