Log Collection Pointer Management for Network Device Monitoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing device management systems face challenges in ensuring that only logs generated during the service provision period are collected and analyzed, particularly when a monitoring apparatus is replaced or re-installed, leading to potential inclusion of logs before the service start in the log collection.
Innovation Solution
An information processing apparatus that obtains a write pointer from a network device and a read pointer from the management server to determine the correct log range, ensuring that only logs generated during the service provision period are collected and transmitted, with the write pointer being managed as the read pointer by the management server if the read pointer is not successfully obtained.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the monitoring apparatus obtains all logs remaining in the network device after replacement, then the log collection completeness is improved, but logs before the service provision start may be included causing data accuracy degradation
Solution Approach 1:
The monitoring apparatus performs preliminary actions by obtaining the write pointer from the network device and the read pointer from the management server before collecting logs. These pointers establish the correct log collection range in advance, ensuring that only logs within the service provision period are obtained, thus preventing inclusion of pre-service logs while maintaining collection completeness
Solution Approach 2:
The system uses feedback mechanisms where the monitoring apparatus receives the read pointer from the management server, which reflects the actual service start position. This feedback information is used to adjust the log collection range, creating a closed-loop control that ensures accurate log collection boundary determination
2Adaptability or versatility
If the monitoring apparatus is replaced or re-installed, then the system adaptability is improved, but the log read position information may be lost causing information loss
Solution Approach 1:
The management server acts as an intermediary that stores the read pointer information centrally. When the monitoring apparatus is replaced, the new apparatus can retrieve the read pointer from the management server, thus the intermediary preserves the position information across apparatus replacements and prevents information loss
Solution Approach 2:
The management server performs multiple functions: it not only manages log data but also stores and manages the read pointer information. This multi-functionality allows the system to maintain position information centrally, making it accessible to any monitoring apparatus and enabling seamless replacement without information loss
Data Source
AI summary
An information processing apparatus transmits log information to a management server which manages a read pointer (RP) indicating position information corresponding to a latest log included in log information obtained from each network device. The information processing apparatus obtains a write pointer (WP) from a network device when starting to monitor a log of the network device. In a case where an existing RP is successfully obtained from the management server, the information processing apparatus issues an obtaining request to obtain log information to the network device by using the RP. In a case where an existing RP is not obtained successfully from the management server, the information processing apparatus transmits the WP as an RP to the management server, and issues an obtaining request to obtain log information to the network device by using the WP.