Method, device, and program product for managing log data

Patent metadata

Field	Value
Publication number	US-12093240-B2
Application number	US-202217883966-A
Country	US
Kind code	B2
Filing date	Aug 9, 2022
Priority date	Dec 30, 2021
Publication date	Sep 17, 2024
Grant date	Sep 17, 2024

Abstract

Techniques manage log data. Such techniques involve receiving log data describing a state of an application system at a target time point. Such techniques further involve determining whether a level of the log data satisfies a predetermined level. Such techniques further involve, in response to determining that the level of the log data satisfies the predetermined level, storing log data within a predetermined range adjacent to the target time point to a log repository of the application system, the predetermined range indicating the amount of log data expected to be stored.

First claim

The invention claimed is:

1. A method for managing log data, comprising:
receiving log data describing a state of an application system at a target time point;
determining whether a level of the log data satisfies a predetermined level; and
in response to determining that the level of the log data satisfies the predetermined level, storing log data within a predetermined range adjacent to the target time point to a log repository of the application system, wherein the predetermined range comprises a time interval before and a time interval after the target time point, wherein the predetermined range is set based on a time cycle of operations in the application system, the predetermined range indicating the amount of log data to be stored, wherein the log data within the time interval and before the target time point is first stored to a log queue of the application system and then stored to the log repository from the log queue, wherein the log data within the time interval and after the target time point is stored to the log repository without being stored in the log queue, and wherein the log queue is used to store at least one piece of log data in chronological order, whereby only log data whose level satisfies the predetermined level and log data within the predetermined range is stored to the log repository of the application system.

2. The method according to claim 1 , wherein the method further comprises:
in response to determining that the level of the log data does not satisfy the predetermined level, adding the log data to the log queue.

3. The method according to claim 2 , wherein adding the log data to the log queue comprises:
determining a distance between the log data and previous log data satisfying the predetermined level; and
adding the log data to the log queue in response to determining that the distance exceeds the predetermined range.

4. The method according to claim 3 , further comprising: in response to determining that the distance does not exceed the predetermined range, storing the log data to the log repository.

5. The method according to claim 1 , wherein the method further comprises: in response to determining that the level of the log data satisfies the predetermined level, storing subsequent log data within the predetermined range after the target time point to the log repository.

6. The method according to claim 1 , wherein the log data is log data in a log data stream that is used to continuously monitor the state of the application system, and the method is executed in response to an update of the log data stream.

7. The method according to claim 1 , further comprising: in response to determining that the log queue exceeds the predetermined range, removing given log data at a head position of the log queue from the log queue.

8. The method according to claim 1 , wherein a capacity of the log queue is not lower than the predetermined range.

9. The method according to claim 1 , wherein the predetermined range is further set based on a speed at which the application system generates log data and a capacity of the log repository.

10. An electronic device, comprising:
at least one processor; and
a memory coupled to the at least one processor and having instructions stored therein, wherein the instructions, when executed by the at least one processor, cause the device to perform actions comprising:
receiving log data describing a state of an application system at a target time point;
determining whether a level of the log data satisfies a predetermined level; and
in response to determining that the level of the log data satisfies the predetermined level, storing log data within a predetermined range adjacent to the target time point to a log repository of the application system, wherein the predetermined range comprises a time interval before and a time interval after the target time point, wherein the predetermined range is set based on a time cycle of operations in the application system, the predetermined range indicating the amount of log data to be stored, wherein the log data within the time interval and before the target time point is first stored to a log queue of the application system and then stored to the log repository from the log queue, wherein the log data within the time interval and after the target time point is stored to the log repository without being stored in the log queue, and wherein the log queue is used to store at least one piece of log data in chronological order, whereby only log data whose level satisfies the predetermined level and log data within the predetermined range is stored to the log repository of the application system.

11. The device according to claim 10 , wherein the actions further comprise:
in response to determining that the level of the log data does not satisfy the predetermined level, adding the log data to the log queue.

12. The device according to claim 11 , wherein adding the log data to the log queue comprises:
determining a distance between the log data and previous log data satisfying the predetermined level; and
adding the log data to the log queue in response to determining that the distance exceeds the predetermined range.

13. The device according to claim 12 , wherein the actions further comprise: in response to determining that the distance does not exceed the predetermined range, storing the log data to the log repository.

14. The device according to claim 10 , wherein the actions further comprise: in response to determining that the level of the log data satisfies the predetermined level, storing subsequent log data within the predetermined range after the target time point to the log repository.

15. The device according to claim 10 , wherein the log data is log data in a log data stream that is used to continuously monitor the state of the application system, and the actions are executed in response to an update of the log data stream.

16. The device according to claim 10 , wherein the actions further comprise: in response to determining that the log queue exceeds the predetermined range, removing given log data at a head position of the log queue from the log queue, and a capacity of the log queue is not lower than the predetermined range.

17. The device according to claim 10 , wherein the predetermined range is set based on at least any of the following: a speed at which the application system generates log data, a time cycle of operations in the application system, and a capacity of the log repository.

18. A computer program product having a non-transitory computer readable medium which stores a set of instructions to manage log data; the set of instructions, when carried out by computerized circuitry, causing the computerized circuitry to perform a method of:
receiving log data describing a state of an application system at a target time point;
determining whether a level of the log data satisfies a predetermined level; and
in response to determining that the level of the log data satisfies the predetermined level, storing log data within a predetermined range adjacent to the target time point to a log repository of the application system, wherein the predetermined range comprises a time interval before and a time interval after the target time point, wherein the predetermined range is set based on a time cycle of operations in the application system, the predetermined range indicating the amount of log data to be stored, wherein the log data within the time interval and before the target time point is first stored to a log queue of the application sys

Assignees

• Dell Products Lp

Inventors

• Liu Xiao
• Zheng Yingyan
• Zhang Junyi
• Wang Yourong Alan
• Luo Xiaowei
• Liu Heng
• Zhou Chunjuan
• Liu Xiaoqin

Classifications

• G06F11/3476

  Data logging (G06F11/14, G06F11/2205 take precedence) · CPC title

• G06F16/1727

  Details of free space management performed by the file system (saving storage space on storage systems G06F3/0608; management of blocks in storage devices G06F3/064) · CPC title

• G06F16/122

  using management policies (point-in-time backing up or restoration of persistent data G06F11/1446; file migration policies for HSM systems G06F16/185) · CPC title

• G06F16/2358 Primary

  Change logging, detection, and notification (replication G06F16/27) · CPC title

• G06F11/30 Primary

  Monitoring · CPC title