CN106657184A - Method and device for analyzing log information - Google Patents
Method and device for analyzing log information Download PDFInfo
- Publication number
- CN106657184A CN106657184A CN201510728082.6A CN201510728082A CN106657184A CN 106657184 A CN106657184 A CN 106657184A CN 201510728082 A CN201510728082 A CN 201510728082A CN 106657184 A CN106657184 A CN 106657184A
- Authority
- CN
- China
- Prior art keywords
- information
- field
- cookie
- cookie information
- log information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/14—Session management
- H04L67/146—Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/50—Network services
- H04L67/56—Provisioning of proxy services
- H04L67/568—Storing data temporarily at an intermediate stage, e.g. caching
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Debugging And Monitoring (AREA)
Abstract
The invention discloses a method and device for analyzing log information, relates to the technical field of information, and mainly aims to solve the problem that at present a mode of recording log information causes relatively low efficiency of log information analysis. The method includes the following steps: when receiving a log information recording instruction, obtaining a first field and a second field from log information, wherein the first field is used for storing cookie information sent by a client to a server, and the second field is used for storing cookie information sent by the server to the client; extracting cookie information from the first field and/or extracting cookie information from the second field; and allocating the cookie information to a preset variable and storing the preset variable in the log information, wherein the preset variable is used for analyzing the log information. The method provided by the invention is suitable for analysis of log information.
Description
Technical field
The present invention relates to areas of information technology, more particularly to a kind of analysis method and device of log information.
Background technology
Cookie (plural form Cookies), Chinese is small-sized text file, refers to some website clothes
Device be engaged in distinguish whether user is validated user and whether needs to log in the data of generation again.Its
In, Website server can safeguard HTTP (Hyper using information is included in Cookies
Text Transport Protocol, HTTP) etc. state in protocol transmission.When user passes through browser
During first time access server, cookie information, server meeting are not carried in the access request of browser
Cookie information is generated, cookie information is sent to into browser；When user is visited again by browser
When asking server, cookie information is carried in the access request of browser, server can be received and browsed
The cookie information that device sends.Generally server can configure the cookie of the first field record browser transmission
Information, configures the cookie information that the second field record server is sent to browser.
At present, server is directly remembered in log information according to the mode of server configuration field
Record cookie information, i.e., record respectively the cookie letters that browser is sent to server by two fields
Breath and server are sent to the cookie information of browser.If however, passing through during log information
Two fields record respectively browser be sent to server cookie information and server be sent to it is clear
The cookie information of device is look at, when subsequently parsing to log information, it is impossible to ensure that server can
Direct access cookie information, when server cannot obtain cookie information from the first field, needs
Cookie information is obtained from the second field, cause the resolving of log information more complicated, from
And cause the less efficient of log information parsing.
The content of the invention
In view of the above problems, it is proposed that the present invention overcomes the problems referred to above or at least portion to provide one kind
The analysis method and device of the log information for solving the above problems with dividing.
According to one aspect of the present invention, the present invention proposes a kind of analytic method of log information, wraps
Include：
When log information recording instruction is received, the first field and the second word are obtained from log information
Section, wherein, first field is used to preserve the cookie information of user end to server transmission, institute
The second field is stated for preserving the cookie information that server sends to client；
Cookie information is extracted from first field, and/or
Cookie information is extracted from second field；
The cookie information is allocated to into preset variable and by the preset variable save to log information
In, the preset variable is used to parse the log information.
According to another aspect of the present invention, the present invention proposes a kind of resolver of log information,
Including：
Acquiring unit, for when receiving log information recording and instructing, the being obtained from log information
One field and the second field, wherein, first field is used to preserve user end to server transmission
Cookie information, second field is used to preserve the cookie information that server sends to client；
Extraction unit, for extracting cookie information from first field, and/or
Cookie information is extracted from second field；
Dispensing unit, for the cookie information to be allocated to into preset variable；
Storage unit, in log information, the preset variable to be used by the preset variable save
In parsing to the log information.
A kind of analysis method and device of the log information provided by above-mentioned technical proposal, the present invention.
When log information recording instruction is received, the first field and the second field are obtained from log information,
Wherein, first field is used to preserving the cookie information of user end to server transmission, and described the
Two fields are used to preserve the cookie information that server sends to client；Extract from first field
Cookie information, and/or extract cookie information from second field；The cookie information is matched somebody with somebody
Put to preset variable and by the preset variable save in log information, it is right that the preset variable is used for
The log information is parsed.With at present in log information, directly configure according to server
The mode of field records cookie information, i.e., record server respectively by two fields and be sent to and browse
The cookie information that the cookie information of device is sent to server with browser is compared, and the present invention passes through
Preset variable records cookie information, can realize when parsing to log information, from preset change
Cookie information can be just obtained in amount such that it is able to the step of simplified log information is parsed, Jin Erneng
Enough lift the efficiency of log information parsing.
Description of the drawings
By the detailed description for reading hereafter preferred embodiment, various other advantage and benefit for
Those of ordinary skill in the art will be clear from understanding.Accompanying drawing is only used for illustrating the mesh of preferred embodiment
, and it is not considered as limitation of the present invention.And in whole accompanying drawing, with identical with reference to symbol
Number represent identical part.In the accompanying drawings：
Fig. 1 shows a kind of flow chart of the analytic method of log information provided in an embodiment of the present invention；
Fig. 2 shows the flow chart of the analytic method of another kind of log information provided in an embodiment of the present invention；
Fig. 3 shows a kind of structural representation of the resolver of log information provided in an embodiment of the present invention
Figure；
Fig. 4 shows a kind of structural representation of the resolver of log information provided in an embodiment of the present invention
Figure.
Specific embodiment
The exemplary embodiment of the disclosure is more fully described below with reference to accompanying drawings.Although showing in accompanying drawing
The exemplary embodiment of the disclosure is shown, it being understood, however, that may be realized in various forms the disclosure
And should not be limited by embodiments set forth here.On the contrary, there is provided these embodiments are able to more
Thoroughly understand the disclosure, and can be by the complete technology for conveying to this area of the scope of the present disclosure
Personnel.
A kind of analytic method of log information is embodiments provided, server is can apply to,
As shown in figure 1, the method includes：
101st, when log information recording instruction is received, the first field is obtained from access log information
With the second field.
Wherein, first field is used to preserve the cookie information of user end to server transmission, institute
The second field is stated for preserving the cookie information that server sends to client.The cookie information
The character string that can at random generate for server, such as 58c8d60cd2b94642a7da48d61e173e13.
Server accesses whether user is whether validated user and user need to log in again to know, leads to
The cookie information of unique mark user can often be generated.Server can be serviced for Nginx (engine x)
Device, wherein, Nginx is a high performance HTTP and Reverse Proxy, is also one
IMAP/POP3/SMTP servers.When server is Nginx servers, can be matched somebody with somebody by following
Putting carries out the configuration of log field：
log_format main'$remote_addr-$remote_user[$time_local]$query_string'
'$status$body_bytes_sent"$http_referer"'
'"$http_user_agent""$http_x_forwarded_for"；
For example, first field can be cookie_XXXX, and XXXX can be cookie information
Identification information, specifically can be cookie information title.User end to server sends cookie
Information is properly termed as asking cookie, after client back-call server, $ cookie_XXXX
There is value, when client first time access server, access log information cannot record cookie information,
The value of $ cookie_XXXX is sky.Second field can be sent_http_set_cookie, service
Device is properly termed as responding cookie to the cookie information that client sends, when client is accessed for the first time
During server, $ sent_http_set_cookie have value, and afterwards $ sent_http_set_cookie are sky.Such as
When client first time access server, server is generated
" testid=58c8d60cd2b94642a7da48d61e173e13；Expires=Fri, 26-Jun-1511:45:38
GMT；Domain=gridsumdissector.com；Path=/", and be saved into
In $ sent_http_set_cookie.Wherein, 58c8d60cd2b94642a7da48d61e173e13 is
Cookie information, testid can be the title of cookie information.Usual second field can be with key-value pair
Form preserves cookie information.When client access server again, can carry in access request
There is the cookie information, server need not regenerate cookie information, directly will
58c8d60cd2b94642a7da48d61e173e13 is saved in $ cookie_testid.
102nd, cookie information is extracted from the first field, and/or cookie information is extracted from the second field.
For the embodiment of the present invention, step 102 is specifically as follows：Whether detect in first field
There is cookie information；If existing, from first field cookie information is extracted；If not existing,
Then extract cookie information from second field.I.e. when log information recording instruction is received, read
The first field $ cookie_testid is taken, judges whether the first field $ cookie_testid is sky, if first
Field $ cookie_testid is sky, then illustrate that the user, by client first time server, now reads
The second field $ sent_http_set_cookie is taken, character string intercepting is carried out to $ sent_http_set_cookie
Process, such as $ sent_http_set_cookie are
" testid=58c8d60cd2b94642a7da48d61e173e13；Expires=Fri, 26-Jun-1511:45:38
GMT；Domain=gridsumdissector.com；Path=/", will
58c8d60cd2b94642a7da48d61e173e13 is extracted.If the first field $ cookie_testid
It is not sky, is 58c8d60cd2b94642a7da48d61e173e13, then illustrates that the user is not first
Secondary access server, in now extracting the first field $ cookie_testid
58c8d60cd2b94642a7da48d61e173e13。
For the embodiment of the present invention, step 102 can also be specifically：Detecting in second field is
It is no to there is cookie information；If existing, from second field cookie information is extracted；If not depositing
Then extracting cookie information from first field.The present invention from the first field to extracting cookie
Information or the order for extracting cookie information from the second field are not limited.
103rd, cookie information is allocated to into preset variable and by preset variable save to log information.
Wherein, the preset variable is used to parse the log information.The preset variable can
Thought before log information recording instruction is received, the variable for pre-setting.For example, preset variable
Can be my_cookie.By the way that the cookie information in the first field or the second field is extracted
To be allocated to preset variable, can realize by a variable save cookie information.In follow-up day
During will information analysis, being capable of direct access cookie information such that it is able to simplify the parsing of log information
Process, and then the efficiency of log information parsing can be lifted.
For example, when preset variable is $ my_cookie, by the tool of preset variable save to log information
Body form can be thought：log_format main'$remote_addr-$remote_user[$time_local]
$query_string$my_cookie'
'$status$body_bytes_sent"$http_referer"'
'"$http_user_agent""$http_x_forwarded_for"'；
A kind of analytic method of log information that the present invention is provided.Instruct when log information recording is received
When, the first field and the second field are obtained from access log information, wherein, first field is used
In the cookie information that user end to server sends is preserved, second field is used to preserve server
To the cookie information that client sends；Cookie information is extracted from first field, and/or from institute
State the second field and extract cookie information；The cookie information is allocated to into preset variable and will be described
To in log information, the preset variable is used to parse the log information preset variable save.
With at present in log information, directly cookie letters are recorded according to the mode of server configuration field
Breath, i.e., record respectively server and be sent to the cookie information of browser and browse by two fields
Device is sent to the cookie information of server and compares, and the present invention records cookie information by preset variable,
Can realize when parsing to log information, cookie information can be just obtained from preset variable,
The step of parsing so as to simplify log information, and then the efficiency of log information parsing can be lifted.
The analytic method of another kind of log information is embodiments provided, server is can apply to,
As shown in Fig. 2 the method includes：
201st, preset variable is set.
Wherein, the preset variable is used to preserve cookie information.For example, preset variable can be
$my_cookie。
202nd, when log information recording instruction is received, the first field is obtained from access log information
With the second field.
Wherein, first field is used to preserve the cookie information of user end to server transmission, institute
The second field is stated for preserving the cookie information that server sends to client.
203rd, detect in the first field and whether there is cookie information.If existing in the first field of detection
Cookie information, then perform 204；If there is no cookie information in the first field of detection, perform
205。
204th, cookie information is extracted from the first field.
For the embodiment of the present invention, if described be present, from first field cookie information is extracted
Afterwards, can also include：Generate the corresponding identification information of the cookie information.Wherein, the cookie
The corresponding identification information of information can be the title of the cookie information, or the cookie information
Identity number (Idtentify, ID).
For example, if the first field $ cookie_testid is
58c8d60cd2b94642a7da48d61e173e13, the cookie information of generation it is entitled
Testid, then extract 58c8d60cd2b94642a7da48d61e173e13, and enters with testid
Row splicing, is spliced into " testid=58c8d60cd2b94642a7da48d61e173e13 ".
205th, cookie information is extracted from the second field.
For the embodiment of the present invention, step 205 is specifically as follows：If not existing, from the second field
Extract cookie information and the corresponding identification information of cookie information.
For example, if the second field $ sent_http_set_cookie is
" testid_A=59c8d60cd2b94642a7da48d61e173e13；Expires=Fri, 26-Jun-15
11:45:38GMT；Domain=gridsumdissector.com；Path=/", will
" testid_A=59c8d60cd2b94642a7da48d61e173e13 " is extracted.
206th, cookie information is allocated to into preset variable and by preset variable save to log information.
Wherein, the preset variable is used to parse the log information.
For the embodiment of the present invention, step 205 is specifically as follows：By the cookie information and described
The corresponding identification information of cookie information is allocated to preset variable.
For example, the cookie information of $ my_cookie preservations is
" testid=58c8d60cd2b94642a7da48d61e173e13 ",
" testid_A=59c8d60cd2b94642a7da48d61e173e13 ".By by the first field or second
Cookie information in field is extracted and is allocated to preset variable, can realize being protected by a variable
Deposit cookie information.When follow-up log information is parsed, can direct access cookie information, from
And the resolving of log information can be simplified, and then the efficiency of log information parsing can be lifted.
The analytic method of another kind of log information that the present invention is provided.Refer to when log information recording is received
When making, the first field and the second field are obtained from access log information, wherein, first field
For preserving the cookie information of user end to server transmission, second field is used to preserve service
The cookie information that device sends to client；From first field extraction cookie information, and/or from
Second field extracts cookie information；The cookie information is allocated to into preset variable and by institute
Preset variable save is stated in log information, the preset variable is used to solve the log information
Analysis.With in log information, directly record cookie according to the mode of server configuration field at present
Information, i.e., record respectively server and be sent to the cookie information of browser, He Liu by two fields
Device of looking at is sent to the cookie information of server and compares, and the present invention records cookie letters by preset variable
Breath, can realize when parsing to log information, and cookie can be just obtained from preset variable
Information such that it is able to the step of simplified log information is parsed, and then log information parsing can be lifted
Efficiency.
Further, a kind of resolver of log information is embodiments provided, such as Fig. 3 institutes
Show, the device includes：Acquiring unit 31, extraction unit 32, dispensing unit 33, storage unit 34.
Acquiring unit 31, for when log information recording instruction is received, obtaining from log information
First field and the second field, wherein, first field is used to preserve user end to server transmission
Cookie information, second field be used for preserve the cookie information that server sends to client.
Extraction unit 32, for extracting cookie information from first field, and/or from described second
Field extracts cookie information.
Dispensing unit 33, for the cookie information to be allocated to into preset variable.
Storage unit 34, for by the preset variable save in log information, the preset variable
For parsing to the log information.
Such as Fig. 4, the extraction unit 32 includes：Detection module 3201 and extraction module 3202.
Detection module 3201, for detecting first field in whether there is cookie information.
Extraction module 3202, if detecting in first field exist for the detection module 3201
Cookie information, then extract cookie information from first field.
The extraction module 3202, if be additionally operable to the detection module 3201 detecting in first field
There is no cookie information, then extract cookie information from second field.
The extraction unit also includes：Generation module 3203.
Generation module 3203, for generating the corresponding identification information of the cookie information.
The dispensing unit 33, specifically for the cookie information is corresponding with the cookie information
Identification information be allocated to preset variable.
Second field is used to preserve cookie information and the cookie letters that server sends to client
Cease corresponding identification information.
The extraction module 3202, if detecting first field specifically for the detection module 3201
In there is no cookie information, then from second field extract cookie information.
The dispensing unit 33, is specifically additionally operable to the cookie information and the cookie information pair
The identification information answered is allocated to preset variable.
Described device also includes：Setting unit 35.
Setting unit 35, for arranging preset variable, wherein, the preset variable is used to preserve cookie
Information.
The device embodiment is corresponding with preceding method embodiment, and for ease of reading, this device embodiment is not
The detail content in preceding method embodiment is repeated one by one again, it should be understood that the present embodiment
In device can correspond to the full content that realize in preceding method embodiment.
A kind of resolver of log information that the present invention is provided.Instruct when log information recording is received
When, the first field and the second field are obtained from access log information, wherein, first field is used
In the cookie information that user end to server sends is preserved, second field is used to preserve server
To the cookie information that client sends；Cookie information is extracted from first field, and/or from institute
State the second field and extract cookie information；The cookie information is allocated to into preset variable and will be described
To in log information, the preset variable is used to parse the log information preset variable save.
With at present in log information, directly cookie letters are recorded according to the mode of server configuration field
Breath, i.e., record respectively server and be sent to the cookie information of browser and browse by two fields
Device is sent to the cookie information of server and compares, and the present invention records cookie information by preset variable,
Can realize when parsing to log information, cookie information can be just obtained from preset variable,
The step of parsing so as to simplify log information, and then the efficiency of log information parsing can be lifted.
The resolver of the log information includes processor and memory, above-mentioned acquiring unit, extraction
Unit, dispensing unit, storage unit and setting unit etc. are stored in memory as program unit,
Corresponding function is realized by computing device storage said procedure unit in memory.
Kernel is included in processor, is gone in memory to transfer corresponding program unit by kernel.Kernel can
To arrange one or more, by way of adjusting kernel parameter to solve current log information,
The less efficient problem that log information can be caused to parse.
Memory potentially includes the volatile memory in computer-readable medium, random access memory
The form such as device (RAM) and/or Nonvolatile memory, such as read-only storage (ROM) or flash memory (flash
RAM), memory includes at least one storage chip.
Present invention also provides a kind of computer program, when performing on data processing equipment,
It is adapted for carrying out initializing the program code of there are as below methods step：
When receiving log information recording and instructing, the first field and the are obtained from access log information
Two fields, wherein, first field is used to preserve the cookie information of user end to server transmission,
Second field is used to preserve the cookie information that server sends to client；
Cookie information is extracted from first field, and/or
Cookie information is extracted from second field；
The cookie information is allocated to into preset variable and by the preset variable save to log information
In, the preset variable is used to parse the log information.
Those skilled in the art it should be appreciated that embodiments herein can be provided as method, system,
Or computer program.Therefore, the application can be implemented using complete hardware embodiment, complete software
Example or with reference to the form of the embodiment in terms of software and hardware.And, the application can be adopted at one
Or it is multiple wherein include computer usable program code computer-usable storage medium (including but not
Be limited to magnetic disc store, CD-ROM, optical memory etc.) on the computer program implemented
Form.
The application is with reference to the method according to the embodiment of the present application, equipment (system) and computer program
The flow chart and/or block diagram of product is describing.It should be understood that can be realized flowing by computer program instructions
In each flow process and/or square frame and flow chart and/or block diagram in journey figure and/or block diagram
Flow process and/or square frame combination.Can provide these computer program instructions to all-purpose computer, specially
With the processor of computer, Embedded Processor or other programmable data processing devices producing one
Machine so that produced by the instruction of computer or the computing device of other programmable data processing devices
It is raw to be used to realize in one flow process of flow chart or one square frame of multiple flow processs and/or block diagram or multiple sides
The device of the function of specifying in frame.
These computer program instructions may be alternatively stored in can guide computer or other programmable datas to process
In the computer-readable memory that equipment works in a specific way so that be stored in the computer-readable and deposit
Instruction in reservoir is produced and includes the manufacture of command device, and command device realization is in flow chart one
The function of specifying in flow process or one square frame of multiple flow processs and/or block diagram or multiple square frames.
These computer program instructions can also be loaded into computer or other programmable data processing devices
On so that series of operation steps is performed on computer or other programmable devices to produce computer
The process of realization, so as to the instruction performed on computer or other programmable devices is provided for realizing
Specify in one flow process of flow chart or one square frame of multiple flow processs and/or block diagram or multiple square frames
The step of function.
In a typical configuration, computing device include one or more processors (CPU), input/
Output interface, network interface and internal memory.
Memory potentially includes the volatile memory in computer-readable medium, random access memory
The form such as device (RAM) and/or Nonvolatile memory, such as read-only storage (ROM) or flash memory (flash
RAM).Memory is the example of computer-readable medium.
Computer-readable medium includes that permanent and non-permanent, removable and non-removable media can be with
Information Store is realized by any method or technique.Information can be computer-readable instruction, data knot
Structure, the module of program or other data.The example of the storage medium of computer includes, but are not limited to phase
Become internal memory (PRAM), static RAM (SRAM), dynamic random access memory
(DRAM), other kinds of random access memory (RAM), read-only storage (ROM), electricity can
Erasable programmable read-only memory (EPROM) (EEPROM), fast flash memory bank or other memory techniques, read-only light
Disk read-only storage (CD-ROM), digital versatile disc (DVD) or other optical storages, magnetic
Cassette tape, the storage of tape magnetic rigid disk or other magnetic storage apparatus or any other non-transmission medium,
Can be used to store the information that can be accessed by a computing device.Define according to herein, computer-readable
Medium does not include temporary computer readable media (transitory media), the such as data-signal and load of modulation
Ripple.
Embodiments herein is these are only, the application is not limited to.For this area skill
For art personnel, the application can have various modifications and variations.It is all spirit herein and principle it
Interior made any modification, equivalent substitution and improvements etc., should be included in claims hereof model
Within enclosing.
Claims (10)
1. a kind of analytic method of log information, it is characterised in that include：
When receiving log information recording and instructing, the first field and the are obtained from access log information
Two fields, wherein, first field is used to preserve the cookie information of user end to server transmission,
Second field is used to preserve the cookie information that server sends to client；
Cookie information is extracted from first field, and/or
Cookie information is extracted from second field；
The cookie information is allocated to into preset variable and by the preset variable save to log information
In, the preset variable is used to parse the log information.
2. the analytic method of log information according to claim 1, it is characterised in that it is described from
First field extracts cookie information, and/or includes from second field extraction cookie information：
Detect and whether there is in first field cookie information；
If existing, from first field cookie information is extracted；
If not existing, from second field cookie information is extracted.
3. the analytic method of log information according to claim 2, it is characterised in that if described
Exist, then extract after cookie information from first field, also include：
Generate the corresponding identification information of the cookie information；
It is described the cookie information is allocated to into preset variable to include：
The cookie information and the corresponding identification information of the cookie information are allocated to into preset variable.
4. the analytic method of log information according to claim 2, it is characterised in that described
Two fields are used to preserve cookie information and the corresponding mark of cookie information that server sends to client
Knowledge information, if described be not present, extracting cookie information from second field includes：
If not existing, from second field cookie information and the corresponding mark of cookie information are extracted
Knowledge information；
It is described the cookie information is allocated to into preset variable to include：
The cookie information and the corresponding identification information of the cookie information are allocated to into preset variable.
5. the analytic method of log information according to claim 1, it is characterised in that described to work as
When receiving log information recording instruction, after the first field and the second field are obtained from log information,
Also include：
Preset variable is set, wherein, the preset variable is used to preserve cookie information.
6. a kind of resolver of log information, it is characterised in that include：
Acquiring unit, for when log information recording instruction is received, obtaining from access log information
The first field and the second field are taken, wherein, first field is used to preserve user end to server
The cookie information sent, second field is used to preserve the cookie letters that server sends to client
Breath；
Extraction unit, for extracting cookie information from first field, and/or
Cookie information is extracted from second field；
Dispensing unit, for the cookie information to be allocated to into preset variable；
Storage unit, in log information, the preset variable to be used by the preset variable save
In parsing to the log information.
7. the resolver of log information according to claim 6, it is characterised in that described to carry
Taking unit includes：
Detection module, for detecting first field in whether there is cookie information；
Extraction module, if detecting in first field there is cookie information for the detection module,
Then extract cookie information from first field；
The extraction module, if be additionally operable to the detection module detecting do not exist in first field
Cookie information, then extract cookie information from second field.
8. the resolver of log information according to claim 6, it is characterised in that described to carry
Taking unit also includes：Generation module,
The generation module, for generating the corresponding identification information of the cookie information；
The dispensing unit, specifically for the cookie information and the cookie information is corresponding
Identification information is allocated to preset variable.
9. the resolver of log information according to claim 6, it is characterised in that described
Two fields are used to preserve cookie information and the corresponding mark of cookie information that server sends to client
Knowledge information,
The extraction module, if detecting do not exist in first field specifically for the detection module
Cookie information, then extract cookie information from second field；
The dispensing unit, is specifically additionally operable to the cookie information is corresponding with the cookie information
Identification information be allocated to preset variable.
10. the resolver of log information according to claim 6, it is characterised in that described
Device also includes：
Setting unit, for arranging preset variable, wherein, the preset variable is used to preserve cookie
Information.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510728082.6A CN106657184B (en) | 2015-10-30 | 2015-10-30 | The analysis method and device of log information |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510728082.6A CN106657184B (en) | 2015-10-30 | 2015-10-30 | The analysis method and device of log information |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106657184A true CN106657184A (en) | 2017-05-10 |
| CN106657184B CN106657184B (en) | 2019-09-24 |
Family
ID=58810286
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510728082.6A Active CN106657184B (en) | 2015-10-30 | 2015-10-30 | The analysis method and device of log information |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106657184B (en) |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20080263222A1 (en) * | 2007-04-20 | 2008-10-23 | Keiichi Matsuzawa | Computer system, root node, and log management method for access path conversion |
| CN102158493A (en) * | 2011-04-15 | 2011-08-17 | 奇智软件（北京）有限公司 | Cookie analyzing method, device thereof and client |
| CN103067198A (en) * | 2012-12-14 | 2013-04-24 | 北京集奥聚合科技有限公司 | Method and system related to Cookie identity (ID) of user |
| CN103970843A (en) * | 2014-04-28 | 2014-08-06 | 东华大学 | Conversation combining method based on UUID in Web log preprocessing |
-
2015
- 2015-10-30 CN CN201510728082.6A patent/CN106657184B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20080263222A1 (en) * | 2007-04-20 | 2008-10-23 | Keiichi Matsuzawa | Computer system, root node, and log management method for access path conversion |
| CN102158493A (en) * | 2011-04-15 | 2011-08-17 | 奇智软件（北京）有限公司 | Cookie analyzing method, device thereof and client |
| CN103067198A (en) * | 2012-12-14 | 2013-04-24 | 北京集奥聚合科技有限公司 | Method and system related to Cookie identity (ID) of user |
| CN103970843A (en) * | 2014-04-28 | 2014-08-06 | 东华大学 | Conversation combining method based on UUID in Web log preprocessing |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106657184B (en) | 2019-09-24 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11663212B2 (en) | Identifying configuration parameters for a query using a metadata catalog | |
| US11663176B2 (en) | Data field extraction model training for a data intake and query system | |
| US11657057B2 (en) | Revising catalog metadata based on parsing queries | |
| US11157497B1 (en) | Dynamically assigning a search head and search nodes for a query | |
| US11275733B1 (en) | Mapping search nodes to a search head using a tenant identifier | |
| US20160301732A1 (en) | Systems and Methods for Recording and Replaying of Web Transactions | |
| US11615082B1 (en) | Using a data store and message queue to ingest data for a data intake and query system | |
| EP3323053B1 (en) | Document capture using client-based delta encoding with server | |
| US6427151B1 (en) | Method, computer program product, system and data structure for formatting transaction results data | |
| US20220036002A1 (en) | Log sourcetype inference model training for a data intake and query system | |
| CN104268082B (en) | The method for testing pressure and device of browser | |
| CN103118007B (en) | A kind of acquisition methods of user access activity and system | |
| US11392578B1 (en) | Automatically generating metadata for a metadata catalog based on detected changes to the metadata catalog | |
| US11966797B2 (en) | Indexing data at a data intake and query system based on a node capacity threshold | |
| CN106656920B (en) | Processing method, device, storage medium and the processor of HTTP service | |
| CN102065147A (en) | Method and device for obtaining user login information based on enterprise application system | |
| CN109376133A (en) | File access method and file access system | |
| CN103152391A (en) | Journal output method and device | |
| CN108667770A (en) | A kind of loophole test method, server and the system of website | |
| CN104102701A (en) | Hive-based method for filing and inquiring historical data | |
| CN106210032A (en) | The method and device reported based on terminal data batch | |
| CN104168250A (en) | CGI frame-based service flow control method and apparatus | |
| CN109413131A (en) | A kind of method and device of log parsing | |
| US20230385280A1 (en) | Database system with run-time query mode selection | |
| WO2022026984A1 (en) | Data field extraction model training for a data intake and query system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information | ||
| CB02 | Change of applicant information |
Address after: 100083 No. 401, 4th Floor, Haitai Building, 229 North Fourth Ring Road, Haidian District, Beijing Applicant after: Beijing Guoshuang Technology Co.,Ltd. Address before: 100086 Cuigong Hotel, 76 Zhichun Road, Shuangyushu District, Haidian District, Beijing Applicant before: Beijing Guoshuang Technology Co.,Ltd. |
|
| GR01 | Patent grant | ||
| GR01 | Patent grant |