Summary of the invention
The technical problem to be solved in the present invention is to provide a kind of event log management method, system, cloud service client and
Virtual platform, the event log to solve the problems, such as client acquisition is excessive and effectiveness is little.
In order to solve the above-mentioned technical problems, the present invention provides a kind of event log management method, this method includes:
Cloud service client sends event log request to virtual platform, wherein carrying the filtering of the event log of request
Policy information;
After the virtual platform receives the event log request, met according to the event log request described
The event log of filtering policy information;
The virtual platform returns to the event log for meeting the filtering policy information to the cloud service client.
Further, the filtering policy information includes event level and/or event type and/or resource type.
Preferably, the event type includes at least:One of installation, system, safety and application, the event level
Including one in serious, advanced, intermediate and rudimentary, the resource type is included at least:One in virtual machine, storage and network
Kind.
The event log request also carries resource information and/or the duration of the event log of request.
If the child resource that the event log request is directed under target resource, the resource information should also include
The child resource of target resource.
In order to solve the above technical problems, the present invention also provides a kind of event log management system, which includes:
The request sending module of cloud service client, for sending event log request to virtual platform, wherein carrying
The filtering policy information of the event log of request;
The request receiving module of the virtual platform, the event log for receiving the transmission of cloud service client are asked
It asks;
The event log of the virtual platform obtains module, described for being met according to the event log request
The event log of filtering policy information;
The event log sending module of the virtual platform, for meeting the mistake to cloud service client return
Filter the event log of policy information;
The event log receiving module of the cloud service client meets institute for receive that the virtual platform sends
State the event log of filtering policy information.
In order to solve the above technical problems, the present invention also provides a kind of cloud service client, which includes:
Request sending module, for sending event log request to virtual platform, wherein carrying the event log of request
Filtering policy information;
Event log receiving module, the thing for meeting the filtering policy information sent for receiving the virtual platform
Part log.
In order to solve the above technical problems, the present invention also provides a kind of virtual platform, which includes:
Request receiving module, for receiving the event log request of cloud service client transmission, wherein carrying the thing of request
The filtering policy information of part log;
Event log obtains module, for meeting the thing of the filtering policy information according to the event log request
Part log;
Event log sending module, for the event log for meeting filtering policy information to be sent to the cloud service
Client.
Compared to the prior art, filtering policy letter is carried in the event log request that cloud service client of the present invention is sent
Breath receives the virtual platform of event log request, can be according to the qualified event log of filtering policy acquisition of information
And cloud service client is returned, to improve the specific aim and validity of the event log of acquisition.
Specific embodiment
As shown in Fig. 2, event log management method of the present invention includes:
Step 201:Cloud service client sends event log request to virtual platform, wherein carrying the event day of request
The filtering policy information of will;
Event log request in carry filtering policy information be in order to obtain the event log for meeting certain particular requirements,
Including but not limited to event level, event type or resource type, for example, the filtering policy information can be one or several
Event level is also possible to one or several event types, or can be one or several resource types, if can also be
The combination of dry event level, several event types and several resource types.
It should be noted that the present invention does not limit the specific manifestation mode of event log request and the tool of virtual platform
Body is constituted, it is preferable that can use signaling identical with the prior art, message or framework.
Step 202:After the virtual platform receives the event log request, according to the event log request
Meet the event log of the filtering policy information;
Step 203:The virtual platform returns to the thing for meeting the filtering policy information to the cloud service client
Part log.
The event type includes at least:One of installation, system, safety and application, the event level include tight
Weight, it is advanced, intermediate and rudimentary in one, the resource type includes one in virtual machine, storage and network.
The event log request also carries resource information and/or the duration of the event log of request.If described
Event log requests the child resource being directed under target resource, and the resource information further includes the child resource letter of target resource
Breath.
Below by taking existing virtual platform framework as an example, further retouched in detail in conjunction with implementation work of the attached drawing to technical solution
It states.It should be noted that in the absence of conflict, the features in the embodiments and the embodiments of the present application can be mutual group
It closes.
Event log implementation steps of Fig. 3 example based on filtering policy.The implementation steps include:
Step 301, client creates virtual system by cloud service platform;
Step 302, event caused by the virtual system of creation is recorded into event log note by event log management device
Library is recorded, event therein includes the information such as timestamp, event title, event content, seriousness;
Step 303, event log management device request event log of the client to cloud service platform, wherein carrying target money
The information such as source, duration, event type, event type therein can be a kind of event type or a variety of event types
Combination either wildcard;
Step 304:After the event log management device of virtual platform receives event log request, from virtual platform event
The event log of specified target resource is obtained in log information library, and event log is filtered according to filtering policy, is extracted
Meet the event log recorder of filtering policy requirement out;
Step 305, the event log management device of virtual platform meets filtering policy requirement event day to client return
Will record.
Fig. 4 exemplary client carries event type filtering policy flow chart to virtual platform request event log.
Step 401, client creates virtual system by cloud service platform;
Step 402, event caused by the virtual system of creation is recorded into event log note by event log management device
Record library;
Step 403, event log management device request event log of the client to cloud service platform, wherein carrying target money
The information such as source, duration, event type, event type therein can be a kind of event type or a variety of event types
Combination either wildcard;
Step 404, it after event log management device receives event log request, obtains and has recorded from event log recorder library
It is relevant to the client, specify target resource and the event log recorder in duration ranges, event log pipe
Reason device is further filtered event log recorder according to event type;
Step 405, event log management device returns to event log recorder to client.
Fig. 5 exemplary client carries event level filtering policy flow chart to virtual platform request event log.
Step 501, client creates virtual system by cloud service platform.
Step 502, event caused by the virtual system of creation is recorded into event log note by event log management device
Record library;
Step 503, event log management device request event log of the client to cloud service platform, wherein carrying target money
The information such as source, duration, event level, event level therein can be a kind of event level or a variety of event level
Combination either wildcard;
Step 504, it after event log management device receives event log request, obtains and has recorded from event log recorder library
It is relevant to the client, specify target resource and the event log recorder in duration ranges, event log pipe
Reason device is further filtered event log recorder according to event level;
Step 505, event log management device returns to event log recorder to client.
Fig. 6 exemplary client carries event type and event level filtering policy to virtual platform request event log
Flow chart.
Step 601, client creates virtual system by cloud service platform;
Step 602, event caused by the virtual system of creation is recorded into event log note by event log management device
Record library;
Step 603, event log management device request event log of the client to cloud service platform, wherein carrying target money
The information such as source, duration, event type and event level.It is either more that event type therein can be a kind of event type
The combination of kind event type either wildcard;Event level therein can be a kind of event level or a variety of event level
Combination either wildcard;
Step 604, it after event log management device receives event log request, obtains and has recorded from event log recorder library
It is relevant to the client, specify target resource and the event log recorder in duration ranges.Event log pipe
Reason device is further filtered event log recorder according to event type and event level;
Step 605, event log management device returns to event log recorder to client.
Fig. 7 exemplary client carries target resource and child resource, filtering policy stream to virtual platform request event log
Cheng Tu.
A kind of situation of this scene application is that event log is directed to virtual system, but client wishes to obtain void
Event log recorder relevant to virtual machine or storage or network in quasi- system.
Step 701, client creates virtual system by cloud service platform;
Step 702, event caused by the virtual system of creation is recorded into event log note by event log management device
Record library
Step 703, event log management device request event log of the client to cloud service platform, wherein carrying target money
The information such as source and filtering policy wherein include resource type in filtering policy information;
Step 704, it after event log management device receives event log request, obtains and has recorded from event log recorder library
It is relevant to the client, specify target resource event log recorder, event log management device is further to event log
The resource type of record is filtered;
Step 705, event log management device returns to event log recorder to client.
Fig. 8 exemplary client requests multiple event logs to virtual platform, and carries different filtering policies.
Step 801, client creates virtual system by cloud service platform;
Step 802, event caused by the virtual system of creation is recorded into event log note by event log management device
Record library;
Step 803, client sends an event log request 1 to the event log management device of cloud service platform, wherein
Carry the information such as target resource 1, duration 1 and filtering policy 1;
Step 804, client sends another event log request 2 to the event log management device of cloud service platform,
The information such as middle carrying target resource 2, duration 2 and filtering policy 2;
Step 805, it after event log management device receives event log request 1, obtains and has remembered from event log recorder library
That records is relevant to the client, meets the event log recorder of target resource 1 and duration 1.Event log management device into
One step is filtered event log recorder by filtering policy 1;
Step 806, event log management device returns to event log to client and requests 1 requested event log recorder;
Step 807, it after event log management device receives event log request 2, obtains and has remembered from event log recorder library
That records is relevant to the client, meets the event log recorder of target resource 2 and duration 2.Event log management device into
One step is filtered event log recorder by filtering policy 2;
Step 808, event log management device returns to event log to client and requests 2 requested event log recorders.
In order to realize the above method, the present invention also provides a kind of event log management systems, as shown in figure 9, the system
Including:
The request sending module of cloud service client, for sending event log request to virtual platform, wherein carrying
The filtering policy information of the event log of request;
The request receiving module of the virtual platform, the event log for receiving the transmission of cloud service client are asked
It asks;
The event log of the virtual platform obtains module, described for being met according to the event log request
The event log of filtering policy information;
The event log sending module of the virtual platform, for meeting the mistake to cloud service client return
Filter the event log of policy information;
The event log receiving module of the cloud service client meets institute for receive that the virtual platform sends
State the event log of filtering policy information.
Specifically, the filtering policy information includes event level, event type or resource type;The event type is extremely
Include less:One in installation, system, safety and application, the event level includes in serious, advanced, intermediate and rudimentary
One, the resource type includes at least:One in virtual machine, storage and network.
Further, the event log request also carries resource information and/or the duration of the event log of request,
The resource information includes target resource and its child resource.As resource information be target resource information or target resource information and
Child resource information under the target resource, it will be appreciated that ground, when carrying resource information in event log request, the virtualization is flat
The event log that platform returns meets resource information requirement simultaneously, when going back in event log request while carrying the duration,
The event log that the virtual platform returns is also the event log within the duration.
In order to realize above method, the present invention also provides a kind of cloud service client, cloud service client includes:
Request sending module, for sending event log request to virtual platform, wherein carrying the event log of request
Filtering policy information;
Event log receiving module, the thing for meeting the filtering policy information sent for receiving the virtual platform
Part log.
Preferably, the filtering policy information includes event level, event type or resource type;The event type is extremely
Include less:One in installation, system, safety and application, the event level includes in serious, advanced, intermediate and rudimentary
One, the resource type includes at least:One in virtual machine, storage and network.
Another is to realize the above method, and the present invention also provides a kind of virtual platform, which includes:
Request receiving module, for receiving the event log request of cloud service client transmission, wherein carrying the thing of request
The filtering policy information of part log;
Event log obtains module, for meeting the thing of the filtering policy information according to the event log request
Part log;
Event log sending module, for the event log for meeting filtering policy information to be sent to the cloud service
Client.
As previously mentioned, the filtering policy information includes event level, event type or resource type;The event type
It includes at least:One in installation, system, safety and application, the event level includes in serious, advanced, intermediate and rudimentary
One, the resource type includes at least:One in virtual machine, storage and network.
Compared to the prior art, filtering policy letter is carried in the event log request that cloud service client of the present invention is sent
Breath receives the virtual platform of event log request, can be according to the qualified event log of filtering policy acquisition of information
And cloud service client is returned, to improve the specific aim and validity of the event log of acquisition.
The above-mentioned only embodiment of the present invention.The invention may also have other embodiments, without departing substantially from spirit of that invention and
In the case where its essence, those skilled in the art make various corresponding changes and modifications in accordance with the present invention, this
A little corresponding changes and modifications all should fall within the scope of protection of the appended claims of the present invention.
Those of ordinary skill in the art will appreciate that all or part of the steps in the above method can be instructed by program
Related hardware is completed, and described program can store in computer readable storage medium, such as read-only memory, disk or CD
Deng.Optionally, one or more integrated circuits can be used also to realize in all or part of the steps of above-described embodiment.Accordingly
Ground, each module/unit in above-described embodiment can take the form of hardware realization, can also use the shape of software function module
Formula is realized.The present invention is not limited to the combinations of the hardware and software of any particular form.