Object model based issue triage

Patent metadata

Field	Value
Publication number	US-11061800-B2
Application number	US-201916428928-A
Country	US
Kind code	B2
Filing date	May 31, 2019
Priority date	May 31, 2019
Publication date	Jul 13, 2021
Grant date	Jul 13, 2021

Abstract

Technologies for assigning a user-generated issue report to an appropriate team for investigation are disclosed. A log file associated with an issue report is parsed to create an object model. The object model is a hierarchy of objects containing data emitted over time by a computer application associated with the issue report. Rules analyze the content of the object model, and when a rule is satisfied, the issue report is assigned to a team associated with the rule for investigation. Rules may access objects in the object model on a per-component level, thereby allowing issues to be assigned to teams at the level of individual components. Rules may also perform a root cause analysis of the issue based on the object model.

First claim

The invention claimed is:

1. A computing device, comprising:
a processor;
a computer-readable storage medium in communication with the processor, the computer-readable storage medium having computer-executable instructions stored thereupon which, when executed by the processor, cause the processor to:
receive a log file associated with a system or software, wherein the log file comprises log entries associated with operations of instances of components of the system or software;
generate an object model comprising objects associated with instances of components of the system or software by:
generating an object of the object model in response to a first log entry that comprises an identifier associated with an instance of a component, and
adding a property to the object in response to a second log entry that comprises the identifier;

wherein the objects form a hierarchy derived from parent-child relationships of instances of components of the system or software;
determine if the object model satisfies one or more criteria specified by a rule; and
perform a prescribed task according to the rule in response to determining that the object model satisfies the one or more criteria specified by the rule.

2. The computing device according to claim 1 , wherein the computer-executable instructions further cause the processor to:
receive a report associated with an issue that occurred during execution of the system or software, wherein the report is associated with the log file, and wherein performing the prescribed task comprises assigning the report to an entity associated with the rule.

3. The computing device according to claim 1 , wherein the computer-executable instructions further cause the processor to:
receive a report associated with an issue that occurred during execution of the system or software, wherein the report is associated with the log file, and wherein determining if the object model satisfies one or more criteria comprises identifying a root cause of the issue.

4. The computing device according to claim 3 , wherein performing the prescribed task comprises resolving the report based on the root cause analysis.

5. The computing device according to claim 3 , wherein the issue is caused by a defect in the system or software, a degraded or missing network connection used by the system or software, an insufficient amount of computing resources available to the system or software, a malicious attack directed towards the system or software, a malfunctioning or missing service consumed by the system or software, a malfunctioning peer computing device in communication with the system or software, or a feature suggestion reported by an end user of the system or software.

6. The computing device according to claim 2 , wherein the assigned report is augmented with information extracted from the object model.

7. The computing device according to claim 1 , wherein a log entry comprises a component name of one of the plurality of components, an object identifier associated with an instance of the component that generated the log entry, and a timestamp associated with a time when the log entry was generated, and wherein the hierarchy of objects is extracted from entries in the log file that define parent-child relationships by reference to an object identifier of another entry in the log file.

8. The computing device according to claim 1 , wherein the computer-executable instructions further cause the processor to:
modify a value of the property in response to a third log entry that comprises the identifier associated with the instance of the component.

9. The computing device according to claim 1 , wherein different instances of an individual component are associated with different identifiers.

10. A computer-implemented method, comprising:
receiving a log file associated with a system or software, wherein the log file comprises log entries associated with operations of instances of components of the system or software;
generating an object model comprising objects associated with instances of components of the system or software by:
generating an object of the object model in response to a first log entry that comprises an identifier associated with an instance of a component, and
adding a property to the object in response to a second log entry that comprises the identifier;

wherein the properties of the instance of the component are extracted from a plurality of log entries generated by the instance of the component;
determining if the object model satisfies one or more criteria specified by a rule; and
performing a prescribed task according to the rule in response to determining that the object model satisfies the one or more criteria specified by the rule.

11. The method of claim 10 , wherein a parent-child relationship is derived from a child log entry of the log entries that references a parent log entry of the log entries.

12. The method of claim 10 , further comprising:
receiving a report associated with an issue that occurred during execution of the system or software, wherein the report is associated with the log file, and wherein performing the prescribed task comprises assigning the report to an entity associated with the rule.

13. The method of claim 10 , further comprising:
receiving a report associated with an issue that occurred during execution of the system or software, wherein the report is associated with the log file, and wherein determining if the object model satisfies one or more criteria comprises identifying a root cause of the issue.

14. The method of claim 13 , wherein performing the prescribed task comprises resolving the report based on the root cause analysis.

15. The method of claim 13 , wherein the issue is caused by a defect in the system or software, a degraded or missing network connection used by the system or software, an insufficient amount of computing resources available to the system or software, a malicious attack directed towards the system or software, a malfunctioning or missing service consumed by the system or software, a malfunctioning peer computing device in communication with the system or software, or a feature suggestion reported by an end user of the system or software.

16. The method of claim 12 , wherein the assigned report is augmented with information extracted from the object model.

17. An apparatus, comprising:
means for receiving a log file associated with a system or software, wherein the log file comprises log entries associated with operations of instances of components of the system or software;
means for generating an object model comprising objects associated with instances of components of the system or software by:
generating an object of the object model in response to a first log entry that comprises an identifier associated with an instance of a component, and
adding a property to the object in response to a second log entry that comprises the identifier,

wherein the objects form a hierarchy derived from parent-child relationships of instances of components of the system or software;
means for determining if the object model satisfies one or more criteria specified by a rule by navigating the hierarchy to an object that corresponds to an instance of a particular component and applying the one or more criteria to the object that corresponds to the instance of the particular component; and
means for performing a prescribed task according to the rule in response to determining that the object model satisfies the one or more criteria specified by the rule.

Assignees

• Microsoft Technology Licensing Llc

Inventors

• Prakash Rama Krishna Prasad Kasapura Satya
• Lu Mei-Hsuan
• Nahata Arihant
• Villasenor Diego
• Mehta Siddharth Deepak
• Kanani Pritesh
• Miao William Edward
• Subramanian Rajasekaran
• Ananthakrishnan Sivakumar Gobichettypalayam
• Liu Yong

Classifications

• G06F11/3698

  Environments for analysis, debugging or testing of software · CPC title

• G06F16/24

  Querying · CPC title

• G06F11/0784

  Routing of error reports, e.g. with a specific transmission path or data flow · CPC title

• G06F11/3476 Primary

  Data logging (G06F11/14, G06F11/2205 take precedence) · CPC title

• G06F11/079

  Root cause analysis, i.e. error or fault diagnosis (in a hardware test environment G06F11/22; in a software test environment G06F11/36) · CPC title