Application dependency determination based on application logs

Patent metadata

Field	Value
Publication number	US-10862779-B2
Application number	US-201815959314-A
Country	US
Kind code	B2
Filing date	Apr 23, 2018
Priority date	Apr 23, 2018
Publication date	Dec 8, 2020
Grant date	Dec 8, 2020

Abstract

Techniques for determining dependencies between applications based on application logs are disclosed. In one embodiment, a system may include a log analyzer to receive application logs generated by a plurality of applications running in a computing environment and analyze the received application logs using a trained application inventory model to parse communication information of the plurality of applications. Further, the system may include an application management unit to determine dependency between a first application and a second application of the plurality of applications running on different compute nodes in the computing environment using the parsed communication information.

First claim

What is claimed is:

1. A system comprising:
a processor; and
memory coupled to the processor, wherein the memory comprises:
a log analyzer to:
receive application logs generated by a plurality of applications running in a computing environment; and
parse the received application logs using a trained application inventory model to detect communication information of the plurality of applications, wherein the communication information comprise connections between the applications that are interacting with each other, and wherein the application inventory model is periodically scan the application logs for an application connection event, an application disconnection event, and/or an application connection change event between the applications; and

an application management unit to:
determine dependency between a first application and a second application of the plurality of applications running on different compute nodes in the computing environment using the detected communication information.

2. The system of claim 1 , wherein the application management unit is to:
dynamically generate a visualization to graphically represent dependency between a first application node corresponding to the first application and a second application node corresponding to the second application upon determining dependency between the first application and the second application, wherein the dependency is represented by an edge between the first application node and the second application node.

3. The system of claim 2 , wherein the application management unit is to:
determine disconnection between the first application and the second application based on parsing the received application logs using the trained application inventory model;
delete the edge between the first application node and the second application node upon determining the disconnection; and
update the visualization upon deleting the edge.

4. The system of claim 2 , wherein the application management unit is to:
determine an inactive application in the plurality of applications by parsing the received application logs using the trained application inventory model;
delete an application node corresponding to the inactive application using a trained garbage collection model; and
update the visualization upon deleting the application node.

5. The system of claim 4 , wherein the application inventory model and the garbage collection model are trained on input words and/or strings of words using the machine learning and natural language processing methods, and wherein the input words and/or the strings of words are selected from historical application logs.

6. The system of claim 1 , wherein the log analyzer is to:
parse the received application logs using a trained initialization model to detect information about the plurality of applications, wherein the application, management unit is to determine a presence of the first application and the second application in the plurality of applications using the detected information.

7. The system of claim 6 , wherein the initialization model is trained on input words and/or strings of words using the machine learning and natural language processing methods, and wherein the input words and/or the strings of words are selected from historical application logs.

8. The system of claim 1 , further comprising:
a log inventory service to index the application logs generated by the plurality of applications, wherein the log analyzer is to receive the indexed application logs from the log inventory service.

9. The system of claim 1 , wherein each of the compute nodes comprises one of a virtual machine, a container, or a physical machine, and wherein the plurality of applications run in a single cloud or distributed across multiple clouds.

10. A method comprising:
receiving, by a log analyzer, application logs venerated by a plurality of applications running in a computing environment;
parsing, by the log analyzer, the received application logs using a trained application inventory model to detect communication information of the plurality of applications, wherein the communication information comprise connections between the applications that are interacting with each other, and wherein the application inventory model is trained using machine learning and natural language processing, methods to periodically scan the application logs for an application connection event, an application disconnection event, and/or an application connection change event between the applications; and
determining, by an application management unit, dependency between a first application and a second application of the plurality of applications running on different compute nodes in the computing environment using the detected communication information.

11. The method of claim 10 , further comprising:
generating, by the application management unit, an application dependency map to represent dependency between a first application node corresponding to the first application and a second application node corresponding to the second application upon determining dependency between the first application and the second application, wherein the dependency is represented by an edge between the first application node and the second application node.

12. The method of claim 11 , further comprising:
determining, by the application management unit, disconnection between the first application and the second, application based on parsing the received application logs using the trained application inventory model;
deleting, by the application management unit, the edge between the first application node and the second application node upon determining the disconnection; and
updating, by the application management unit, the application dependency map upon deleting the edge.

13. The method of claim 11 , further comprising:
determining, by the application management unit, an inactive application in the plurality of applications by parsing the received application logs using the trained application inventory model; and
deleting, by the application management unit, an application node corresponding to the inactive application using a trained garbage collection model; and
updating, by the application management unit, the application dependency map upon deleting the application node.

14. The method of claim 10 , comprising:
parsing, by the log analyzer, the received application logs using a trained initialization model to detect information about the plurality of applications; and
determining, by the application management unit, a presence of the first application and the second application in the plurality of applications using the detected information prior to determining the dependency between the first application and the second application.

15. The method of claim 10 , further comprising:
indexing the application logs generated by the plurality of applications in a log inventory service, wherein the application logs are received by the log analyzer from the log inventory service.

16. The method of claim 10 , wherein each of the compute nodes comprises one of a virtual machine, a container, or a physical machine, and wherein the plurality of applications run in a single cloud or distributed across multiple clouds.

17. The method of claim 10 , further comprising:
determining, by the application management unit, dependency among application components associated with the first application and the second application upon determining the dependency between the first application and the second application

Assignees

• Vmware Inc

Inventors

• Sahoo Sidhartha
• Chaudhary Vipul
• Hegde Sandeep L
• Sridharan Arunvijai

Classifications

• H04L41/0856

  by backing up or archiving configuration information · CPC title

• H04L41/145

  involving simulating, designing, planning or modelling of a network · CPC title

• G06F11/3476

  Data logging (G06F11/14, G06F11/2205 take precedence) · CPC title

• H04L41/22

  comprising specially adapted graphical user interfaces [GUI] · CPC title

• H04L67/10 Primary

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title