Application change notifications based on application logs

Patent metadata

Field	Value
Publication number	US-11467862-B2
Application number	US-201916524201-A
Country	US
Kind code	B2
Filing date	Jul 29, 2019
Priority date	Jul 22, 2019
Publication date	Oct 11, 2022
Grant date	Oct 11, 2022

Abstract

Techniques for generating change notifications associated with applications based on application logs are disclosed. In one embodiment, a system may include a log analyzer to receive application logs generated by the applications running in a computing environment and analyze the received application logs to parse information about the applications. Further, the system may include a change detection unit communicatively coupled to the log analyzer to generate a change notification indicating that a change has been occurred to an application running on a compute node in the computing environment using the parsed information and send the change notification indicating the changed application to a subscriber.

First claim

What is claimed is:

1. A system comprising:
a processor; and
memory coupled to the processor, wherein the memory comprises:
a log analyzer to:
receive application logs generated by a plurality of applications running in a computing environment; and
analyze the received application logs to parse information about the plurality of applications, wherein the log analyzer is to analyze the received application logs using context aware log parsing queries to parse information about the plurality of applications; and

a change detection unit communicatively coupled to the log analyzer to:
generate a change notification indicating that a change has been occurred to an application running on a compute node in the computing environment using the parsed information; and
send the change notification indicating that the change has been occurred to the application to a subscriber.

2. The system of claim 1 , wherein the log analyzer is to generate an alarm when the parsed information matches with a context aware log parsing query.

3. The system of claim 2 , wherein the change detection unit is to:
receive the generated alarm from the log analyzer through a notification service;
transform the generated alarm into a change notification message; and
place the change notification message on a notification bus for consumption by the subscriber.

4. The system of claim 1 , wherein the change detection unit is to:
build a notification bus to push the change notification to the subscriber of the notification bus.

5. The system of claim 1 , wherein the compute node comprises one of a virtual machine, a container, or a physical machine, and wherein the plurality of applications run in a single cloud or distributed across multiple clouds.

6. The system of claim 1 , further comprising:
a log inventory service to index the application logs generated by the plurality of applications, wherein the log analyzer is to receive the indexed application logs from the log inventory service.

7. A system comprising:
a processor; and
memory coupled to the processor, wherein the memory comprises:
a log analyzer to:
receive application logs generated by a plurality of applications running in a computing environment; and
analyze the received application logs to parse information about the plurality of applications;

a change detection unit communicatively coupled to the log analyzer to:
generate a change notification indicating that a change has been occurred to an application running on a compute node in the computing environment using the parsed information; and
send the change notification indicating the changed application to a subscriber; and

an infrastructure management unit to:
extract a change associated with an individual component of the application upon receiving the change notification, wherein the change corresponds to one of create, read, update, and delete (CRUD) changes;
retrieve data associated with the individual component corresponding to the change; and
manage the application in the computing environment using the retrieved data.

8. The system of claim 1 , wherein the change detection unit is to generate the change notification indicating that the change has been occurred to an individual component of the application using the parsed information about the plurality of applications.

9. A system comprising:
a processor; and
memory coupled to the processor, wherein the memory comprises:
a log analyzer to:
receive application logs generated by a plurality of applications running in a computing environment; and
analyze the received application logs using an initialization model to parse information about the plurality of applications, wherein the initialization model is trained on input words and/or strings of words using machine learning and natural language processing methods, and wherein the input words and/or the strings of words are selected from historical application logs; and

a change detection unit communicatively coupled to the log analyzer to:
generate a change notification indicating that a change has been occurred to an application running on a compute node in the computing environment using the parsed information; and
send the change notification indicating the changed application to a subscriber.

10. A method comprising:
receiving, by a log analyzer, application logs generated by a plurality of applications running in a computing environment;
analyzing, by the log analyzer, the received application logs to parse information about the plurality of applications, wherein the received application logs are analyzed using context aware log parsing queries to parse information about the plurality of applications;
generating, by a change notification as a service (CNaaS) application, a change notification indicating that a change has been occurred to an application running on a compute node in the computing environment using the parsed information; and
sending the change notification indicating that the change has been occurred to the application to a subscriber.

11. The method of claim 10 , further comprising:
monitoring and/or managing the application in the computing environment in response to the change notification.

12. The method of claim 10 , further comprising:
generating, by the log analyzer, an alarm when the parsed information matches with a context aware log parsing query.

13. The method of claim 12 , wherein generating the change notification indicating that the change has been occurred to the application comprises:
receiving, by the CNaaS application, the generated alarm from the log analyzer through a notification service;
transforming, by the CNaaS application, the generated alarm into a change notification message; and
placing, by the CNaaS application, the change notification message on a notification bus for consumption by the subscriber.

14. The method of claim 10 , wherein generating the change notification indicating that the change has been occurred to the application comprises:
generating the change notification indicating that the change has been occurred to an individual component of the application using the parsed information.

15. The method of claim 10 , comprising:
indexing the application logs generated by the plurality of applications in a log inventory service, wherein the application logs are received by the log analyzer from the log inventory service.

16. The method of claim 10 , further comprising:
registering, via the CNaaS application, for at least one change notification that is desired to be received by the subscriber.

17. A method comprising:
receiving, by a log analyzer, application logs generated by a plurality of applications running in a computing environment;
analyzing the received application logs using an initialization model to parse information about the plurality of applications, wherein the initialization model is trained on input words and/or strings of words using machine learning and natural language processing methods, and wherein the input words and/or the strings of words are selected from historical application logs;
generating, by a change notification as a service (CNaaS) application, a change notification indicating that a change has been occurred to an application running on a compute node in the computing environment using the parsed information; and
sending the change notification identifying the changed application to a subscriber.

18. A non-transitory machine-readable storage medium encoded with instructions that, when executed

Assignees

• Vmware Inc

Inventors

• Sharma Gaurav
• Shinde Jagdish
• Singhal Ravi

Classifications

• G06F11/3006

  where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems (multiprogramming arrangements G06F9/46; allocation of resources G06F9/50) · CPC title

• G06F16/90335

  Query processing · CPC title

• G06F16/1805

  Append-only file systems, e.g. using logs or journals to store data · CPC title

• G06F9/45558 Primary

  Hypervisor-specific management and integration aspects · CPC title

• G06F16/2358

  Change logging, detection, and notification (replication G06F16/27) · CPC title