CN108694213A - Generation method, search method and the device of journal file - Google Patents

Generation method, search method and the device of journal file Download PDF

Info

Publication number
CN108694213A
CN108694213A CN201710235645.7A CN201710235645A CN108694213A CN 108694213 A CN108694213 A CN 108694213A CN 201710235645 A CN201710235645 A CN 201710235645A CN 108694213 A CN108694213 A CN 108694213A
Authority
CN
China
Prior art keywords
daily record
field
value
event
data structure
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201710235645.7A
Other languages
Chinese (zh)
Inventor
江浩
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Elongnet Information Technology Beijing Co Ltd
Original Assignee
Elongnet Information Technology Beijing Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Elongnet Information Technology Beijing Co Ltd filed Critical Elongnet Information Technology Beijing Co Ltd
Priority to CN201710235645.7A priority Critical patent/CN108694213A/en
Publication of CN108694213A publication Critical patent/CN108694213A/en
Pending legal-status Critical Current

Links

Landscapes

  • Debugging And Monitoring (AREA)

Abstract

The present invention provides a kind of generation method of journal file, search method and device, which includes:The data structure of configuration log file, the data structure include the first field, and the value of first field is used to identify the event for generating daily record;During system operation, structural generation daily record based on the data, wherein the value of first field in a plurality of daily record that same event generates is identical.Technical scheme of the present invention solves the problems, such as daily record series connection not, improves system development and the working efficiency of maintenance personnel.

Description

Generation method, search method and the device of journal file
Technical field
The present invention relates to computer and Internet technical field, in particular to a kind of generation method of journal file, Search method and device.
Background technology
Currently, computer system is in the process of running, the daily record of magnanimity can be all generated daily.These daily records include but unlimited In system log, error log, business diary etc..Since the service line of Internet company is more, each online top of service line The server count of administration in the thousands, once system goes wrong, generally requires manually login service device and checks daily record, this is one The kind low-down work of efficiency.Especially when cannot directly position the server to go wrong, it is necessary to log in every clothes one by one Business device is checked, time-consuming and laborious.
Meanwhile a large amount of daily records are dispersed in each server of each system, have been tended not to when problem analysis These daily records are together in series analysis by effect ground, also give in this way and position problem and cause very big trouble.
It should be noted that information is only used for reinforcing the reason of the background to the present invention disclosed in above-mentioned background technology part Solution, therefore may include the information not constituted to the prior art known to persons of ordinary skill in the art.
Invention content
The purpose of the present invention is to provide a kind of generation of journal file and retrieval schemes, and then at least to a certain extent Overcome the problems, such as caused by the limitation and defect of the relevant technologies one or more.
Other characteristics and advantages of the present invention will be apparent from by the following detailed description, or partially by the present invention Practice and acquistion.
According to the first aspect of the invention, a kind of generation method of journal file is provided, including:The number of configuration log file According to structure, the data structure includes the first field, and the value of first field is used to identify the event for generating daily record;It is being During system operation, structural generation daily record based on the data, wherein described the in a plurality of daily record that same event generates The value of one field is identical.
In some embodiments of the invention, it is based on said program, the data structure also includes the second field, and described the The value of two fields is used to identify the hierarchical relationship at least one daily record that same event generates.
In some embodiments of the invention, it is based on said program, further includes:Generating the corresponding daily record of any one event When, determine at least one action of any one event triggering;According to holding at least one action of any one event triggering Row sequence, determines the hierarchical relationship of at least one daily record generated based on any one event, wherein each action corresponds to one Daily record;According to the hierarchical relationship at least one daily record that any one event generates, described the is arranged in the daily record of generation The value of two fields.
In some embodiments of the invention, it is based on said program, second field includes:Action identification and level mark Know;The hierarchical identification includes spaced character string and hierarchical identification symbol, the number of hierarchical identification symbol and daily record Number of levels is positively correlated relationship.
According to the second aspect of the invention, it is also proposed that a kind of search method of journal file, including:Acquisition system is being transported The daily record that row generates in the process, the data structure of the daily record includes the first field, and the value of first field is for identifying Generate the event of daily record, wherein the value of first field in a plurality of daily record that same event generates is identical;Obtain daily record text The search condition of part;Based on the search condition, matched daily record is searched.
In some embodiments of the invention, it is based on said program, the data structure also includes the second field, and described the The value of two fields is used to identify the hierarchical relationship at least one daily record that same event generates.
In some embodiments of the invention, it is based on said program, further includes:If there is a plurality of daily record in the daily record found The first field value it is identical, then according to the value of the second field in a plurality of daily record determine a plurality of daily record level close System;Based on the hierarchical relationship of a plurality of daily record, a plurality of daily record is shown.
In some embodiments of the invention, it is based on said program, further includes:It is produced in the process of running getting system After raw daily record, the format of the daily record got is checked;If the format of any daily record got and the data structure are not Matching, then abandon any daily record;If the format of any daily record got matches with the data structure, institute is stored State any daily record.
According to the third aspect of the invention we, it is also proposed that a kind of generating means of journal file, including:Dispensing unit is used In the data structure of configuration log file, the data structure includes the first field, and the value of first field is for identifying Generate the event of daily record;Generation unit is used for during system operation, structural generation daily record based on the data, wherein The value of first field in a plurality of daily record that same event generates is identical.
In some embodiments of the invention, it is based on said program, the data structure also includes the second field, and described the The value of two fields is used to identify the hierarchical relationship at least one daily record that same event generates.
In some embodiments of the invention, it is based on said program, the generation unit includes:Determination unit is used for When generating the corresponding daily record of any one event, at least one action of any one event triggering is determined, according to any one event At least one action of triggering executes sequence, determines that the level of at least one daily record generated based on any one event is closed System, wherein each action corresponds to a daily record;Setting unit, at least one day for being generated according to any one event The value of second field is arranged in the hierarchical relationship of will in the daily record of generation.
In some embodiments of the invention, it is based on said program, second field includes:Action identification and level mark Know;The hierarchical identification includes spaced character string and hierarchical identification symbol, the number of hierarchical identification symbol and daily record Number of levels is positively correlated relationship.
According to the fourth aspect of the invention, it is also proposed that a kind of retrieval device of journal file, including:First obtains list The data structure of member, the daily record generated in the process of running for obtaining system, the daily record includes the first field, and described The value of one field is used to identify the event for generating daily record, wherein first field in a plurality of daily record that same event generates Value it is identical;Second acquisition unit, the search condition for obtaining journal file;Processing unit, for being based on the retrieval item Part searches matched daily record.
In some embodiments of the invention, it is based on said program, the data structure also includes the second field, and described the The value of two fields is used to identify the hierarchical relationship at least one daily record that same event generates.
In some embodiments of the invention, it is based on said program, further includes:Determination unit, for single in the processing Have in the daily record that member is found the value of the first field of a plurality of daily record it is identical when, according to the second field in a plurality of daily record Value determines the hierarchical relationship of a plurality of daily record;Display unit is used for the hierarchical relationship based on a plurality of daily record, described in displaying A plurality of daily record.
In some embodiments of the invention, it is based on said program, further includes:Inspection unit, for being obtained described first After taking unit to get the daily record that system generates in the process of running, the format of the daily record got is checked;Storage unit is used When determining that the format of any daily record got is mismatched with the data structure in the inspection unit, abandon described any Daily record, and for when the inspection unit determines that the format of any daily record got matches with the data structure, depositing Store up any daily record.
In the technical solution that some embodiments of the present invention are provided, due to including in the data structure of journal file First field, the value of first field are used to identify the event for generating daily record, and the in a plurality of daily record of same event generation The value of one field is identical, therefore in inquiry log, can have association based on the value of the first field in daily record to inquire Multiple daily records of relationship.And by the way that the second field is added in the data structure of journal file, to identify same event generation The hierarchical relationship of at least one daily record so that in inquiry log, can determine day based on the value of the second field in daily record Hierarchical relationship between will solves the problems, such as daily record series connection not, improves system development and the work of maintenance personnel effect Rate.
It should be understood that above general description and following detailed description is only exemplary and explanatory, not It can the limitation present invention.
Description of the drawings
The drawings herein are incorporated into the specification and forms part of this specification, and shows the implementation for meeting the present invention Example, and be used to explain the principle of the present invention together with specification.It should be evident that the accompanying drawings in the following description is only the present invention Some embodiments for those of ordinary skill in the art without creative efforts, can also basis These attached drawings obtain other attached drawings.In the accompanying drawings:
Fig. 1 diagrammatically illustrates the flow chart of the generation method of journal file according to an embodiment of the invention;
Fig. 2 diagrammatically illustrates the flow chart of the search method of journal file according to an embodiment of the invention;
Fig. 3 diagrammatically illustrates the flow chart of the processing method of journal file according to an embodiment of the invention;
Fig. 4 diagrammatically illustrates the surface chart according to an embodiment of the invention that search condition is inputted for user;
Fig. 5 diagrammatically illustrates log searching result interface figure according to an embodiment of the invention;
Fig. 6 diagrammatically illustrates association and hierarchical relationship schematic diagram between daily record according to an embodiment of the invention;
Fig. 7 diagrammatically illustrates the block diagram of the generating means of journal file according to an embodiment of the invention;
Fig. 8 diagrammatically illustrates the block diagram of the retrieval device of journal file according to an embodiment of the invention.
Specific implementation mode
Example embodiment is described more fully with reference to the drawings.However, example embodiment can be with a variety of shapes Formula is implemented, and is not understood as limited to example set forth herein;On the contrary, thesing embodiments are provided so that the present invention will more Fully and completely, and by the design of example embodiment comprehensively it is communicated to those skilled in the art.
In addition, described feature, structure or characteristic can be incorporated in one or more implementations in any suitable manner In example.In the following description, many details are provided to fully understand the embodiment of the present invention to provide.However, It will be appreciated by persons skilled in the art that technical scheme of the present invention can be put into practice without one or more in specific detail, Or other methods, constituent element, device, step may be used etc..In other cases, it is not shown in detail or describes known side Method, device, realization or operation are to avoid fuzzy each aspect of the present invention.
Block diagram shown in attached drawing is only functional entity, not necessarily must be corresponding with physically separate entity. I.e., it is possible to realize these functional entitys using software form, or realized in one or more hardware modules or integrated circuit These functional entitys, or these functional entitys are realized in heterogeneous networks and/or processor device and/or microcontroller device.
Flow chart shown in attached drawing is merely illustrative, it is not necessary to including all content and operation/step, It is not required to execute by described sequence.For example, some operation/steps can also decompose, and some operation/steps can close And or part merge, therefore the sequence actually executed is possible to be changed according to actual conditions.
Fig. 1 diagrammatically illustrates the flow chart of the generation method of journal file according to an embodiment of the invention.
Referring to Fig.1, the generation method of journal file according to an embodiment of the invention, includes the following steps:
Step S102, the data structure of configuration log file, the data structure include the first field, first word The value of section is used to identify the event for generating daily record.
In an embodiment of the present invention, the data structure of journal file is primarily used to the format of canonical log file, i.e., The daily record format having the same of data structure building by configuring.Exemplary embodiment according to the present invention, first word Section can be traceID, i.e., identify the event for generating daily record with traceID.
Step S104, during system operation, structural generation daily record based on the data, wherein same event production The value of first field in raw a plurality of daily record is identical.
In some embodiments of the invention, it is based on said program, the data structure also includes the second field, and described the The value of two fields is used to identify the hierarchical relationship at least one daily record that same event generates.
In an embodiment of the present invention, since same event may trigger multiple actions, and each acting can generate One daily record, therefore by the way that the second field is arranged in data structure, it can be at least one daily record that same event generates Hierarchical relationship is identified.
Exemplary embodiment according to the present invention, second field include:Action identification and hierarchical identification;The level Mark includes spaced character string and hierarchical identification symbol, and the number of the hierarchical identification symbol and the number of levels of daily record are at positive Pass relationship.
In the specific implementation mode of the present invention, the number for the character string for including in hierarchical identification can be arbitrary, level Identifier can be any character.For example the character string in hierarchical identification can be random digit, hierarchical identification symbol can be "."。
In some embodiments of the invention, it is based on said program, further includes:Generating the corresponding daily record of any one event When, determine at least one action of any one event triggering;According to holding at least one action of any one event triggering Row sequence, determines the hierarchical relationship of at least one daily record generated based on any one event, wherein each action corresponds to one Daily record;According to the hierarchical relationship at least one daily record that any one event generates, described the is arranged in the daily record of generation The value of two fields.
Fig. 2 diagrammatically illustrates the flow chart of the search method of journal file according to an embodiment of the invention.
With reference to Fig. 2, the search method of journal file according to an embodiment of the invention includes the following steps:
The data structure of step S202, the daily record that acquisition system generates in the process of running, the daily record include first Field, the value of first field are used to identify the event for generating daily record, wherein the institute in a plurality of daily record that same event generates The value for stating the first field is identical.
In an embodiment of the present invention, the daily record that Servers-all generates in system can be got, and then can will be divided The daily record being dispersed in each server of each system carries out Macro or mass analysis.
Step S204 obtains the search condition of journal file.
In an embodiment of the present invention, the interface of input search condition can be provided a user, and then detects user at this Input operation on interface, with determination search condition input by user.Wherein it is possible to according to the data structure of journal file come really Determine the search condition that user can input, for example have above-mentioned first field in data structure, then search condition input by user is provided In may include value for the first field input by user.
Step S206 is based on the search condition, searches matched daily record.
In some embodiments of the invention, it is based on said program, the data structure also includes the second field, and described the The value of two fields is used to identify the hierarchical relationship at least one daily record that same event generates.
In some embodiments of the invention, it is based on said program, further includes:If there is a plurality of daily record in the daily record found The first field value it is identical, then according to the value of the second field in a plurality of daily record determine a plurality of daily record level close System;Based on the hierarchical relationship of a plurality of daily record, a plurality of daily record is shown.
It should be noted that after the hierarchical relationship for determining above-mentioned a plurality of daily record, it can be directly according to this plurality of daily record Hierarchical relationship be shown, can also be when receiving the instruction being shown, then show this plurality of daily record.
In some embodiments of the invention, it is based on said program, further includes:It is produced in the process of running getting system After raw daily record, the format of the daily record got is checked;If the format of any daily record got and the data structure are not Matching, then abandon any daily record;If the format of any daily record got matches with the data structure, institute is stored State any daily record.
Below using above-mentioned first field be traceID, the second field is span as embodiment, to the technical side of the present invention Case is described in detail:
In an embodiment of the present invention, the data structure of the daily record generated in system operation include traceID and Span fields.As an example, the data structure of daily record can be as shown in table 1:
Table 1
In the process of running, server generates daily record, the daily record that server generates to system according to above-mentioned data format It can be stored in disk.Then by log collection client, the daily record being collected into is sent in message-oriented middleware, such as It is sent in Kafka (a kind of distributed post subscription message system of high-throughput).Log analysis processing server is read should Daily record in message-oriented middleware, and daily record is parsed, related content is stored in database (such as HBase), this completes Log collection and storage work.When needing to retrieve daily record, by log query system, search condition is inputted, you can find institute Need daily record.Due to including traceID in daily record, the daily record with identical traceID can be viewed.
Meanwhile daily record being together in series by different level by the way of traceID+span in the embodiment of the present invention. TraceID is the mark of one or more daily record, if a plurality of daily record, then it represents that be the day generated by one group associated " action " Will.If 5 daily records are had recorded than primary complete user's request, then this 5 daily records should traceID having the same. There is traceID that can distinguish different " action ", but the hierarchical relationship of this action can not be distinguished, therefore the present invention The hierarchical relationship between daily record is identified by span in embodiment.
The structure of exemplary embodiment according to the present invention, span is made of action identification and hierarchical identification, specially:
Dong Zuobiaoshi |x.yyy.zzz
Wherein, action identification is one group of operation primitive of definition, is used to identify the action for generating daily record, the present invention's In exemplary embodiment, action identification can define as shown in table 2:
CS Client is sent
CR Client receives
SS Server-side is sent
SR Server-side receives
Table 2
" client " and " server-side " shown in table 2 are opposite concepts, that is, provide service side and be " server-side ", send out Request is named " client ".For hierarchical identification, often pass through one layer, i.e., (number is not plus some random numbers below at " point " Limit).In this way, so that it may to realize that the layering to daily record is retrieved.
Particular flow sheet is as shown in figure 3, include:
Step S302, server generate daily record.
During system operation, according to the daily record of above-mentioned journal format record traffic system generation.As this hair Bright specific implementation mode, daily record can be recorded in text file, and every daily record is a line, be ended up with/r/n carriage return characters.
Step S304, log collection.
In an embodiment of the present invention, client can be acquired with configuration log and carrys out collector journal.
The daily record of collection is sent to message-oriented middleware by step S306.
Step S308 judges whether journal format is correct, if so, thening follow the steps S310;Otherwise, daily record is abandoned.
Step S310 parses daily record.
In an embodiment of the present invention, the daily record that message-oriented middleware can be pulled by log processing system, parses and locates Manage daily record.Wherein, daily record can be resolvable to each field, and (be identified by traceid and span) with unique mark, and Storage is in the database.
Step S312 is stored to database.
Step S314 carries out log searching.
When carrying out log searching, user need to only input search condition, you can inquire the daily record of the condition of satisfaction, and energy It is enough that all daily records with correlation are checked by trace trees.
Specifically, in an embodiment of the present invention, it is illustrated in figure 4 the page that user inputs search condition, in the page In, user can be inquired by inputting various conditions to carry out log query and daily record table structure.When user input query condition And after submitting, it will present out query result interface as shown in Figure 5;When user checks trace trees, Fig. 6 institutes are will present out It is showing as a result, so that user intuitively views association and hierarchical relationship between daily record.
Fig. 7 diagrammatically illustrates the block diagram of the generating means of journal file according to an embodiment of the invention.
As shown in fig. 7, the generating means 700 of journal file according to an embodiment of the invention, including:Dispensing unit 702 and generation unit 704.
Specifically, dispensing unit 702 is used for the data structure of configuration log file, and the data structure includes the first word Section, the value of first field are used to identify the event for generating daily record;Generation unit 704 is used for during system operation, Structural generation daily record based on the data, wherein the value of first field in a plurality of daily record that same event generates is identical.
Exemplary embodiment according to the present invention, the data structure also include the second field, the value of second field Hierarchical relationship for identifying at least one daily record that same event generates.
Exemplary embodiment according to the present invention, the generation unit 704 include:Determination unit, for any in generation When the corresponding daily record of event, at least one action of any one event triggering is determined, extremely according to any one event triggering A few action executes sequence, determines the hierarchical relationship of at least one daily record generated based on any one event, wherein every A action corresponds to a daily record;The level of setting unit, at least one daily record for being generated according to any one event is closed System, is arranged the value of second field in the daily record of generation.
Exemplary embodiment according to the present invention, second field include:Action identification and hierarchical identification;The level Mark includes spaced character string and hierarchical identification symbol, and the number of the hierarchical identification symbol and the number of levels of daily record are at positive Pass relationship.
Fig. 8 diagrammatically illustrates the block diagram of the retrieval device of journal file according to an embodiment of the invention.
As shown in figure 8, the retrieval device 800 of journal file according to an embodiment of the invention, including:First obtains Unit 802, second acquisition unit 804 and processing unit 806.
Specifically, first acquisition unit 802 is for obtaining the daily record that system generates in the process of running, the number of the daily record Include the first field according to structure, the value of first field is used to identify the event for generating daily record, wherein same event generates A plurality of daily record in first field value it is identical;Second acquisition unit 804 is used to obtain the search condition of journal file; Processing unit 806 is used to be based on the search condition, searches matched daily record.
Exemplary embodiment according to the present invention, the data structure also include the second field, the value of second field Hierarchical relationship for identifying at least one daily record that same event generates.
Exemplary embodiment according to the present invention further includes:Determination unit, the day for being found in the processing unit Have in will the value of the first field of a plurality of daily record it is identical when, determined according to the value of the second field in a plurality of daily record described more The hierarchical relationship of daily record;Display unit is used for the hierarchical relationship based on a plurality of daily record, shows a plurality of daily record.
Exemplary embodiment according to the present invention further includes:Inspection unit, for being got in the first acquisition unit After the daily record that system generates in the process of running, the format of the daily record got is checked;Storage unit, in the inspection When unit determines that the format of any daily record got is mismatched with the data structure, any daily record is abandoned, and be used for When the inspection unit determines that the format of any daily record got matches with the data structure, any day is stored Will.
The technical solution of the embodiment of the present invention allows system development and maintenance personnel to be checked at a unified interface The daily record that each server generates on line, while capableing of the daily record of with different levels retrieval associated system, reduce developer The complex nature of the problem is looked into, makes it that need not pay close attention to server log and collects problem, focus more on processing business particular problem, improve Working efficiency.
It should be noted that although being referred to several modules or list for acting the equipment executed in above-detailed Member, but this division is not enforceable.In fact, according to the embodiment of the present invention, it is above-described two or more The feature and function of module either unit can embody in a module or unit.Conversely, an above-described mould Either the feature and function of unit can be further divided into and embodied by multiple modules or unit block.
Through the above description of the embodiments, those skilled in the art is it can be readily appreciated that example described herein is implemented Mode can also be realized by software realization in such a way that software is in conjunction with necessary hardware.Therefore, according to the present invention The technical solution of embodiment can be expressed in the form of software products, the software product can be stored in one it is non-volatile Property storage medium (can be CD-ROM, USB flash disk, mobile hard disk etc.) in or network on, including some instructions are so that a calculating Equipment (can be personal computer, server, touch control terminal or network equipment etc.) is executed according to embodiment of the present invention Method.
Those skilled in the art after considering the specification and implementing the invention disclosed here, will readily occur to its of the present invention Its embodiment.This application is intended to cover the present invention any variations, uses, or adaptations, these modifications, purposes or Person's adaptive change follows the general principle of the present invention and includes undocumented common knowledge in the art of the invention Or conventional techniques.The description and examples are only to be considered as illustrative, and true scope and spirit of the invention are by following Claim is pointed out.
It should be understood that the invention is not limited in the precision architectures for being described above and being shown in the accompanying drawings, and And various modifications and changes may be made without departing from the scope thereof.The scope of the present invention is limited only by the attached claims.

Claims (10)

1. a kind of generation method of journal file, which is characterized in that including:
The data structure of configuration log file, the data structure include the first field, and the value of first field is for marking Know the event for generating daily record;
During system operation, structural generation daily record based on the data, wherein in a plurality of daily record that same event generates First field value it is identical.
2. the generation method of journal file according to claim 1, which is characterized in that the data structure also includes second Field, the value of second field are used to identify the hierarchical relationship at least one daily record that same event generates.
3. the generation method of journal file according to claim 2, which is characterized in that further include:
In the corresponding daily record of generation any one event, at least one action of any one event triggering is determined;
Sequence is executed according at least one action of any one event triggering, determines and is generated extremely based on any one event The hierarchical relationship of a few daily record, wherein each action corresponds to a daily record;
According to the hierarchical relationship at least one daily record that any one event generates, second word is set in the daily record of generation The value of section.
4. the generation method of journal file according to claim 3, which is characterized in that second field includes:Action Mark and hierarchical identification;
The hierarchical identification includes spaced character string and hierarchical identification symbol, the number of hierarchical identification symbol and daily record Number of levels is positively correlated relationship.
5. a kind of search method of journal file, which is characterized in that including:
The daily record that acquisition system generates in the process of running, the data structure of the daily record include the first field, and described first The value of field is used to identify the event for generating daily record, wherein first field in a plurality of daily record of same event generation It is worth identical;
Obtain the search condition of journal file;
Based on the search condition, matched daily record is searched.
6. the search method of journal file according to claim 5, which is characterized in that the data structure also includes second Field, the value of second field are used to identify the hierarchical relationship at least one daily record that same event generates.
7. the search method of journal file according to claim 6, which is characterized in that further include:
If there is the value of the first field of a plurality of daily record identical in the daily record found, according to the second word in a plurality of daily record The value of section determines the hierarchical relationship of a plurality of daily record;
Based on the hierarchical relationship of a plurality of daily record, a plurality of daily record is shown.
8. the search method of journal file according to any one of claims 5 to 7, which is characterized in that further include:
After the daily record that the system that gets generates in the process of running, the format of the daily record got is checked;
If the format of any daily record got is mismatched with the data structure, any daily record is abandoned;
If the format of any daily record got matches with the data structure, any daily record is stored.
9. a kind of generating means of journal file, which is characterized in that including:
Dispensing unit is used for the data structure of configuration log file, and the data structure includes the first field, first word The value of section is used to identify the event for generating daily record;
Generation unit is used for during system operation, structural generation daily record based on the data, wherein same event production The value of first field in raw a plurality of daily record is identical.
10. a kind of retrieval device of journal file, which is characterized in that including:
First acquisition unit, the daily record generated in the process of running for obtaining system, the data structure of the daily record include First field, the value of first field are used to identify the event for generating daily record, wherein in a plurality of daily record that same event generates First field value it is identical;
Second acquisition unit, the search condition for obtaining journal file;
Processing unit searches matched daily record for being based on the search condition.
CN201710235645.7A 2017-04-12 2017-04-12 Generation method, search method and the device of journal file Pending CN108694213A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201710235645.7A CN108694213A (en) 2017-04-12 2017-04-12 Generation method, search method and the device of journal file

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201710235645.7A CN108694213A (en) 2017-04-12 2017-04-12 Generation method, search method and the device of journal file

Publications (1)

Publication Number Publication Date
CN108694213A true CN108694213A (en) 2018-10-23

Family

ID=63842550

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710235645.7A Pending CN108694213A (en) 2017-04-12 2017-04-12 Generation method, search method and the device of journal file

Country Status (1)

Country Link
CN (1) CN108694213A (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111143311A (en) * 2019-12-13 2020-05-12 东软集团股份有限公司 Method, device, medium and equipment for determining correlation between applications and searching log correlation
CN111427736A (en) * 2019-01-09 2020-07-17 北京嘀嘀无限科技发展有限公司 Log monitoring method, device, equipment and computer readable storage medium
CN114629929A (en) * 2022-03-16 2022-06-14 北京奇艺世纪科技有限公司 Log recording method, device and system

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101610174A (en) * 2009-07-24 2009-12-23 深圳市永达电子股份有限公司 A kind of log correlation analysis system and method
CN102164050A (en) * 2011-05-16 2011-08-24 北京星网锐捷网络技术有限公司 Log parsing method and log parsing node device

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101610174A (en) * 2009-07-24 2009-12-23 深圳市永达电子股份有限公司 A kind of log correlation analysis system and method
CN102164050A (en) * 2011-05-16 2011-08-24 北京星网锐捷网络技术有限公司 Log parsing method and log parsing node device

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
刘敏献: "基于Docker的服务调用拓扑分析和性能监控系统的设计与实现", 《中国优秀硕士学位论文全文数据库 信息科技辑》 *

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111427736A (en) * 2019-01-09 2020-07-17 北京嘀嘀无限科技发展有限公司 Log monitoring method, device, equipment and computer readable storage medium
CN111427736B (en) * 2019-01-09 2024-03-12 北京嘀嘀无限科技发展有限公司 Log monitoring method, device, equipment and computer readable storage medium
CN111143311A (en) * 2019-12-13 2020-05-12 东软集团股份有限公司 Method, device, medium and equipment for determining correlation between applications and searching log correlation
CN111143311B (en) * 2019-12-13 2023-10-13 东软集团股份有限公司 Inter-application association determination and log association search methods, devices, media and equipment
CN114629929A (en) * 2022-03-16 2022-06-14 北京奇艺世纪科技有限公司 Log recording method, device and system
CN114629929B (en) * 2022-03-16 2024-03-08 北京奇艺世纪科技有限公司 Log recording method, device and system

Similar Documents

Publication Publication Date Title
CN102073725B (en) Method for searching structured data and search engine system for implementing same
CN102687138B (en) Search is advised cluster and is presented
CN101796795B (en) Distributed system
US8645385B2 (en) System and method for automating categorization and aggregation of content from network sites
US9292612B2 (en) Internet profile service
US20200372007A1 (en) Trace and span sampling and analysis for instrumented software
US8682881B1 (en) System and method for extracting structured data from classified websites
US20110264651A1 (en) Large scale entity-specific resource classification
CN100507918C (en) Automatic positioning method of network key resource page
CN101916294B (en) Method for realizing exact search by utilizing semantic analysis
CN110532309B (en) Generation method of college library user portrait system
CN102667761A (en) Scalable cluster database
CN1725220A (en) Time stamp methods for unified plant model
CN111459985A (en) Identification information processing method and device
CN101751457A (en) Information processing apparatus, database system and information processing method
CN102855309A (en) Information recommendation method and device based on user behavior associated analysis
CN110543477B (en) Label construction system and method
CN108319661A (en) A kind of structured storage method and device of spare part information
US20110184815A1 (en) System and method for sharing profits with one or more content providers
CN102880721A (en) Implementation method of vertical search engine
JP4962980B2 (en) Search result classification apparatus and method using click log
CN111191111A (en) Content recommendation method, device and storage medium
CN108694213A (en) Generation method, search method and the device of journal file
CN103226609A (en) Searching method for WEB focus searching system
JPH1031683A (en) Url information database constructing method and internet retrieval server utilizing the method

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20181023