CN111176957A - Log browsing method and device including timely search and electronic equipment - Google Patents

Log browsing method and device including timely search and electronic equipment Download PDF

Info

Publication number
CN111176957A
CN111176957A CN201911240113.8A CN201911240113A CN111176957A CN 111176957 A CN111176957 A CN 111176957A CN 201911240113 A CN201911240113 A CN 201911240113A CN 111176957 A CN111176957 A CN 111176957A
Authority
CN
China
Prior art keywords
log
records
buffer area
analyzed
alarm
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201911240113.8A
Other languages
Chinese (zh)
Inventor
张双魁
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shaanxi Suninfo Technology Co ltd
Original Assignee
Shaanxi Suninfo Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shaanxi Suninfo Technology Co ltd filed Critical Shaanxi Suninfo Technology Co ltd
Priority to CN201911240113.8A priority Critical patent/CN111176957A/en
Publication of CN111176957A publication Critical patent/CN111176957A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/30Monitoring
    • G06F11/32Monitoring with visual or acoustical indication of the functioning of the machine
    • G06F11/324Display of status information
    • G06F11/327Alarm or error message display
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/30Monitoring
    • G06F11/3003Monitoring arrangements specially adapted to the computing system or computing system component being monitored
    • G06F11/302Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system component is a software system

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Quality & Reliability (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Computing Systems (AREA)
  • Mathematical Physics (AREA)
  • Debugging And Monitoring (AREA)

Abstract

The embodiment of the disclosure provides a log browsing method and device including timely search and electronic equipment, belonging to the technical field of data processing, wherein the method comprises the following steps: starting monitoring operation based on the path of the log file to be monitored and the added search keyword specified by the user; monitoring the change of the log file by using a log collector, and storing the newly generated log content into a log buffer area; extracting log records from a log buffer area by using a log analyzer, performing content matching with the search keywords, keeping the successfully matched log records in an alarm buffer area, and marking the analyzed records; and respectively and continuously extracting the analyzed records from the log buffer area by using a log displayer, outputting the records to an interface log display area, and continuously extracting the records from the alarm buffer area and outputting the records to an interface alarm log display area. By the processing scheme, the log browsing efficiency is improved.

Description

Log browsing method and device including timely search and electronic equipment
Technical Field
The present disclosure relates to the field of data processing technologies, and in particular, to a log browsing method and apparatus including a timely search, and an electronic device.
Background
The existing log browsing methods have two kinds: (1) the method can realize continuous log browsing, simultaneously can design a search box and a displayed interface according to requirements, and can timely find and display log records containing search contents. (2) The log is recorded into a log file in a certain format and is viewed by a text browsing tool. A general text browsing tool also has a function of searching for contents.
The first method realizes timely search while browsing logs, but only can be used for logs supported by specific application software or generated by the application software, and has no universality. The text browsing tool of the second method can browse most text logs, but cannot display the change of log files in time, and match and alarm display in time.
Disclosure of Invention
In view of the above, embodiments of the present disclosure provide a log browsing method and apparatus including a timely search, and an electronic device, so as to at least partially solve the problems in the prior art.
In a first aspect, an embodiment of the present disclosure provides a log browsing method including a timely search, including:
starting monitoring operation based on the path of the log file to be monitored and the added search keyword specified by the user;
monitoring the change of the log file by using a log collector, and storing the newly generated log content into a log buffer area;
extracting log records from a log buffer area by using a log analyzer, performing content matching with the search keywords, keeping the successfully matched log records in an alarm buffer area, and marking the analyzed records;
and respectively and continuously extracting the analyzed records from the log buffer area by using a log displayer, outputting the records to an interface log display area, and continuously extracting the records from the alarm buffer area and outputting the records to an interface alarm log display area.
According to a specific implementation manner of the embodiment of the present disclosure, the starting of the monitoring operation based on the path of the log file to be monitored and the added search keyword specified by the user includes:
acquiring the path of a log file which is determined to be monitored by a user and the completion operation of an added search keyword;
after the completion operation, a monitoring operation is started.
According to a specific implementation manner of the embodiment of the present disclosure, the starting of the monitoring operation includes:
acquiring a target object to be monitored;
and monitoring the log change condition of the target object.
According to a specific implementation manner of the embodiment of the present disclosure, the monitoring, by the log collector, a change in a log file, and saving a newly generated log content in the log buffer includes:
acquiring the change condition of the monitored log file in a periodic scanning mode;
and saving the newly generated log content to a log buffer area based on the change condition of the log file.
According to a specific implementation manner of the embodiment of the present disclosure, the extracting log records from a log buffer by using a log analyzer, performing content matching with search keywords, keeping the successfully matched log records in an alarm buffer, and marking the analyzed records as completed includes:
and setting a keyword matching rule, and performing content matching on the log records extracted from the log buffer area based on the keyword matching rule.
According to a specific implementation manner of the embodiment of the present disclosure, the extracting log records from a log buffer by using a log analyzer, performing content matching with search keywords, keeping the successfully matched log records in an alarm buffer, and marking the analyzed records as completed includes:
the method comprises the steps of obtaining analyzed log records, setting a preset field for the analyzed log records, and setting the completion flag based on the preset field.
According to a specific implementation manner of the embodiment of the present disclosure, the continuously extracting, by using a log displayer, the analyzed records from the log buffer area and outputting the extracted records to the interface log display area, and continuously extracting the records from the alarm buffer area and outputting the extracted records to the interface alarm log display area respectively includes:
based on the completion flag, the records that have been analyzed are extracted from the log buffer.
In a second aspect, an embodiment of the present disclosure provides a log browsing apparatus including a timely search, including:
the starting module is used for starting monitoring operation based on the path of the log file to be monitored and the added search keyword specified by the user;
the storage module is used for monitoring the change of the log file by using the log collector and storing the newly generated log content into the log buffer area;
the matching module is used for extracting log records from the log buffer area by using the log analyzer, performing content matching with the search keywords, keeping the successfully matched log records in the alarm buffer area, and marking the analyzed records;
and the output module is used for continuously extracting the analyzed records from the log buffer area by using the log displayer respectively, outputting the records to the interface log display area, and continuously extracting the records from the alarm buffer area and outputting the records to the interface alarm log display area.
In a third aspect, an embodiment of the present disclosure further provides an electronic device, where the electronic device includes:
at least one processor; and the number of the first and second groups,
a memory communicatively coupled to the at least one processor; wherein the content of the first and second substances,
the memory stores instructions executable by the at least one processor to enable the at least one processor to perform a log browsing method including a timely search in any of the implementations of the first aspect or the first aspect.
In a fourth aspect, the present disclosure also provides a non-transitory computer-readable storage medium storing computer instructions for causing a computer to execute the log browsing method including the prompt search in the first aspect or any implementation manner of the first aspect.
In a fifth aspect, the present disclosure also provides a computer program product, where the computer program product includes a computer program stored on a non-transitory computer-readable storage medium, where the computer program includes program instructions, and when the program instructions are executed by a computer, the computer executes a log browsing method including a prompt search in the foregoing first aspect or any implementation manner of the first aspect.
The log browsing scheme including the timely search in the embodiment of the disclosure comprises the steps of starting monitoring operation through a path of a log file to be monitored and an added search keyword which are specified by a user; monitoring the change of the log file by using a log collector, and storing the newly generated log content into a log buffer area; extracting log records from a log buffer area by using a log analyzer, performing content matching with the search keywords, keeping the successfully matched log records in an alarm buffer area, and marking the analyzed records; and respectively and continuously extracting the analyzed records from the log buffer area by using a log displayer, outputting the records to an interface log display area, and continuously extracting the records from the alarm buffer area and outputting the records to an interface alarm log display area. Through the processing scheme disclosed by the invention, as long as a user arbitrarily specifies one or more log files (only supporting text logs) to be monitored, a search keyword is input: when the log file changes, the continuous generation of the log can be seen on the monitoring interface in real time, and the log matched with the search keyword can be displayed in the alarm area in time. Simultaneously, the following requirements are met: 1. monitoring a general log file; 2. and the newly generated log content is displayed in time and continuously, and the keywords are matched in time and alarmed in time.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings needed to be used in the embodiments will be briefly described below, and it is apparent that the drawings in the following description are only some embodiments of the present disclosure, and it is obvious for those skilled in the art that other drawings can be obtained according to the drawings without creative efforts.
Fig. 1 is a flowchart of a log browsing method including a timely search according to an embodiment of the present disclosure;
FIG. 2 is a flowchart of another log browsing method including a timely search according to an embodiment of the present disclosure;
fig. 3 is a schematic structural diagram of a log browsing apparatus including a timely search according to an embodiment of the present disclosure;
fig. 4 is a schematic view of an electronic device provided in an embodiment of the present disclosure.
Detailed Description
The embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.
The embodiments of the present disclosure are described below with specific examples, and other advantages and effects of the present disclosure will be readily apparent to those skilled in the art from the disclosure in the specification. It is to be understood that the described embodiments are merely illustrative of some, and not restrictive, of the embodiments of the disclosure. The disclosure may be embodied or carried out in various other specific embodiments, and various modifications and changes may be made in the details within the description without departing from the spirit of the disclosure. It is to be noted that the features in the following embodiments and examples may be combined with each other without conflict. All other embodiments, which can be derived by a person skilled in the art from the embodiments disclosed herein without making any creative effort, shall fall within the protection scope of the present disclosure.
It is noted that various aspects of the embodiments are described below within the scope of the appended claims. It should be apparent that the aspects described herein may be embodied in a wide variety of forms and that any specific structure and/or function described herein is merely illustrative. Based on the disclosure, one skilled in the art should appreciate that one aspect described herein may be implemented independently of any other aspects and that two or more of these aspects may be combined in various ways. For example, an apparatus may be implemented and/or a method practiced using any number of the aspects set forth herein. Additionally, such an apparatus may be implemented and/or such a method may be practiced using other structure and/or functionality in addition to one or more of the aspects set forth herein.
It should be noted that the drawings provided in the following embodiments are only for illustrating the basic idea of the present disclosure, and the drawings only show the components related to the present disclosure rather than the number, shape and size of the components in actual implementation, and the type, amount and ratio of the components in actual implementation may be changed arbitrarily, and the layout of the components may be more complicated.
In addition, in the following description, specific details are provided to facilitate a thorough understanding of the examples. However, it will be understood by those skilled in the art that the aspects may be practiced without these specific details.
The embodiment of the disclosure provides a log browsing method including timely searching. The log browsing method including the prompt search provided by the embodiment may be executed by a computing device, which may be implemented as software or implemented as a combination of software and hardware, and may be integrally disposed in a server, a client, and the like.
Referring to fig. 1 and fig. 2, a log browsing method including a timely search in an embodiment of the present disclosure may include the following steps:
s101, starting monitoring operation based on the path of the log file to be monitored and the added search keyword specified by the user.
The method and the device can monitor the monitoring requirement of the user, acquire the path of the log file to be monitored from the input of the user, acquire the search keyword added by the user, and start the monitoring operation based on the operations of the user.
S102, the log collector is used for monitoring the change of the log file, and the newly generated log content is stored in a log buffer area.
The log collector can monitor the change condition of the log file, and when new log content is generated in the log file through monitoring, the newly generated log content can be stored in the log buffer area, and the log buffer area can be set according to actual needs.
S103, extracting log records from the log buffer area by using a log analyzer, performing content matching with the search keywords, keeping the successfully matched log records in an alarm buffer area, and marking the analyzed records.
The log analyzer may extract log records from the set log buffer, and may obtain successfully matched contents by content-matching the extracted log records with the search keywords of the user.
The log of successful matching can be saved to the set alarm buffer area, and meanwhile, the analyzed records are marked to be finished.
And S104, continuously extracting the analyzed records from the log buffer area by using the log displayer, outputting the records to the interface log display area, and continuously extracting the records from the alarm buffer area and outputting the records to the interface alarm log display area.
Through the mode, as long as a user arbitrarily specifies one or more log files (only supporting text logs) to be monitored, the search keyword is input: when the log file changes, the continuous generation of the log can be seen on the monitoring interface in real time, and the log matched with the search keyword can be displayed in the alarm area in time. Simultaneously, the following requirements are met: 1. monitoring a general log file; 2. and the newly generated log content is displayed in time and continuously, and the keywords are matched in time and alarmed in time.
According to a specific implementation manner of the embodiment of the present disclosure, the starting of the monitoring operation based on the path of the log file to be monitored and the added search keyword specified by the user includes:
acquiring the path of a log file which is determined to be monitored by a user and the completion operation of an added search keyword;
after the completion operation, a monitoring operation is started.
According to a specific implementation manner of the embodiment of the present disclosure, the starting of the monitoring operation includes:
acquiring a target object to be monitored;
and monitoring the log change condition of the target object.
According to a specific implementation manner of the embodiment of the present disclosure, the monitoring, by the log collector, a change in a log file, and saving a newly generated log content in the log buffer includes:
acquiring the change condition of the monitored log file in a periodic scanning mode;
and saving the newly generated log content to a log buffer area based on the change condition of the log file.
According to a specific implementation manner of the embodiment of the present disclosure, the extracting log records from a log buffer by using a log analyzer, performing content matching with search keywords, keeping the successfully matched log records in an alarm buffer, and marking the analyzed records as completed includes:
and setting a keyword matching rule, and performing content matching on the log records extracted from the log buffer area based on the keyword matching rule.
According to a specific implementation manner of the embodiment of the present disclosure, the extracting log records from a log buffer by using a log analyzer, performing content matching with search keywords, keeping the successfully matched log records in an alarm buffer, and marking the analyzed records as completed includes:
the method comprises the steps of obtaining analyzed log records, setting a preset field for the analyzed log records, and setting the completion flag based on the preset field.
According to a specific implementation manner of the embodiment of the present disclosure, the continuously extracting, by using a log displayer, the analyzed records from the log buffer area and outputting the extracted records to the interface log display area, and continuously extracting the records from the alarm buffer area and outputting the extracted records to the interface alarm log display area respectively includes:
based on the completion flag, the records that have been analyzed are extracted from the log buffer.
Corresponding to the above method embodiment, referring to fig. 3, the embodiment of the present disclosure further provides a log browsing apparatus 30 including a timely search, including:
the starting module 301 is configured to start a monitoring operation based on a path of a log file to be monitored and an added search keyword specified by a user;
a saving module 302, configured to monitor changes in log files by using a log collector, and save newly generated log contents in a log buffer;
a matching module 303, configured to extract log records from the log buffer by using a log analyzer, perform content matching with the search keyword, keep the successfully matched log records in the alarm buffer, and mark the analyzed records;
and the output module 304 is configured to continuously extract the analyzed records from the log buffer by using the log display, output the analyzed records to the interface log display area, and continuously extract the records from the alarm buffer and output the extracted records to the interface alarm log display area.
For parts not described in detail in this embodiment, reference is made to the contents described in the above method embodiments, which are not described again here.
Referring to fig. 4, an embodiment of the present disclosure also provides an electronic device 60, including:
at least one processor; and the number of the first and second groups,
a memory communicatively coupled to the at least one processor; wherein the content of the first and second substances,
the memory stores instructions executable by the at least one processor to enable the at least one processor to perform the log browsing method including the timely search of the foregoing method embodiments.
The disclosed embodiments also provide a non-transitory computer-readable storage medium storing computer instructions for causing the computer to execute the log browsing method including the timely search in the foregoing method embodiments.
The disclosed embodiments also provide a computer program product comprising a computer program stored on a non-transitory computer readable storage medium, the computer program comprising program instructions which, when executed by a computer, cause the computer to perform the log browsing method including the timely search in the aforementioned method embodiments.
Referring now to FIG. 4, a block diagram of an electronic device 60 suitable for use in implementing embodiments of the present disclosure is shown. The electronic devices in the embodiments of the present disclosure may include, but are not limited to, mobile terminals such as mobile phones, notebook computers, digital broadcast receivers, PDAs (personal digital assistants), PADs (tablet computers), PMPs (portable multimedia players), in-vehicle terminals (e.g., car navigation terminals), and the like, and fixed terminals such as digital TVs, desktop computers, and the like. The electronic device shown in fig. 4 is only an example, and should not bring any limitation to the functions and the scope of use of the embodiments of the present disclosure.
As shown in fig. 4, the electronic device 60 may include a processing means (e.g., a central processing unit, a graphics processor, etc.) 601 that may perform various appropriate actions and processes in accordance with a program stored in a Read Only Memory (ROM)602 or a program loaded from a storage means 608 into a Random Access Memory (RAM) 603. In the RAM 603, various programs and data necessary for the operation of the electronic apparatus 60 are also stored. The processing device 601, the ROM602, and the RAM 603 are connected to each other via a bus 604. An input/output (I/O) interface 605 is also connected to bus 604.
Generally, the following devices may be connected to the I/O interface 605: input devices 606 including, for example, a touch screen, touch pad, keyboard, mouse, image sensor, microphone, accelerometer, gyroscope, etc.; output devices 607 including, for example, a Liquid Crystal Display (LCD), a speaker, a vibrator, and the like; storage 608 including, for example, tape, hard disk, etc.; and a communication device 609. The communication means 609 may allow the electronic device 60 to communicate with other devices wirelessly or by wire to exchange data. While the figures illustrate an electronic device 60 having various means, it is to be understood that not all illustrated means are required to be implemented or provided. More or fewer devices may alternatively be implemented or provided.
In particular, according to an embodiment of the present disclosure, the processes described above with reference to the flowcharts may be implemented as computer software programs. For example, embodiments of the present disclosure include a computer program product comprising a computer program embodied on a computer readable medium, the computer program comprising program code for performing the method illustrated in the flow chart. In such an embodiment, the computer program may be downloaded and installed from a network via the communication means 609, or may be installed from the storage means 608, or may be installed from the ROM 602. The computer program, when executed by the processing device 601, performs the above-described functions defined in the methods of the embodiments of the present disclosure.
It should be noted that the computer readable medium in the present disclosure can be a computer readable signal medium or a computer readable storage medium or any combination of the two. A computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples of the computer readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the present disclosure, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. In contrast, in the present disclosure, a computer readable signal medium may comprise a propagated data signal with computer readable program code embodied therein, either in baseband or as part of a carrier wave. Such a propagated data signal may take many forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device. Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to: electrical wires, optical cables, RF (radio frequency), etc., or any suitable combination of the foregoing.
The computer readable medium may be embodied in the electronic device; or may exist separately without being assembled into the electronic device.
The computer readable medium carries one or more programs which, when executed by the electronic device, cause the electronic device to: acquiring at least two internet protocol addresses; sending a node evaluation request comprising the at least two internet protocol addresses to node evaluation equipment, wherein the node evaluation equipment selects the internet protocol addresses from the at least two internet protocol addresses and returns the internet protocol addresses; receiving an internet protocol address returned by the node evaluation equipment; wherein the obtained internet protocol address indicates an edge node in the content distribution network.
Alternatively, the computer readable medium carries one or more programs which, when executed by the electronic device, cause the electronic device to: receiving a node evaluation request comprising at least two internet protocol addresses; selecting an internet protocol address from the at least two internet protocol addresses; returning the selected internet protocol address; wherein the received internet protocol address indicates an edge node in the content distribution network.
Computer program code for carrying out operations for aspects of the present disclosure may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C + +, and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet service provider).
The flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.
The units described in the embodiments of the present disclosure may be implemented by software or hardware. Where the name of a unit does not in some cases constitute a limitation of the unit itself, for example, the first retrieving unit may also be described as a "unit for retrieving at least two internet protocol addresses".
It should be understood that portions of the present disclosure may be implemented in hardware, software, firmware, or a combination thereof.
The above description is only for the specific embodiments of the present disclosure, but the scope of the present disclosure is not limited thereto, and any changes or substitutions that can be easily conceived by those skilled in the art within the technical scope of the present disclosure should be covered within the scope of the present disclosure. Therefore, the protection scope of the present disclosure shall be subject to the protection scope of the claims.

Claims (10)

1. A log browsing method including a timely search is characterized by comprising the following steps:
starting monitoring operation based on the path of the log file to be monitored and the added search keyword specified by the user;
monitoring the change of the log file by using a log collector, and storing the newly generated log content into a log buffer area;
extracting log records from a log buffer area by using a log analyzer, performing content matching with the search keywords, keeping the successfully matched log records in an alarm buffer area, and marking the analyzed records;
and respectively and continuously extracting the analyzed records from the log buffer area by using a log displayer, outputting the records to an interface log display area, and continuously extracting the records from the alarm buffer area and outputting the records to an interface alarm log display area.
2. The method according to claim 1, wherein the starting of the monitoring operation based on the path of the log file to be monitored specified by the user and the added search keyword comprises:
acquiring the path of a log file which is determined to be monitored by a user and the completion operation of an added search keyword;
after the completion operation, a monitoring operation is started.
3. The method of claim 1, wherein initiating a monitoring operation comprises:
acquiring a target object to be monitored;
and monitoring the log change condition of the target object.
4. The method of claim 1, wherein monitoring log file changes with a log collector and saving newly generated log content to a log buffer comprises:
acquiring the change condition of the monitored log file in a periodic scanning mode;
and saving the newly generated log content to a log buffer area based on the change condition of the log file.
5. The method of claim 1, wherein the extracting log records from the log buffer by the log analyzer, performing content matching with the search key, keeping the successfully matched log records in the alarm buffer, and completing the marking of the analyzed records comprises:
and setting a keyword matching rule, and performing content matching on the log records extracted from the log buffer area based on the keyword matching rule.
6. The method of claim 1, wherein the extracting log records from the log buffer by the log analyzer, performing content matching with the search key, keeping the successfully matched log records in the alarm buffer, and completing the marking of the analyzed records comprises:
the method comprises the steps of obtaining analyzed log records, setting a preset field for the analyzed log records, and setting the completion flag based on the preset field.
7. The method of claim 1, wherein the using the log presenter to continuously retrieve the analyzed records from the log buffer and output the analyzed records to the interface log presentation area, and continuously retrieve the records from the alarm buffer and output the extracted records to the interface alarm log presentation area, respectively, comprises:
based on the completion flag, the records that have been analyzed are extracted from the log buffer.
8. A log browsing device including a search in time, comprising:
the starting module is used for starting monitoring operation based on the path of the log file to be monitored and the added search keyword specified by the user;
the storage module is used for monitoring the change of the log file by using the log collector and storing the newly generated log content into the log buffer area;
the matching module is used for extracting log records from the log buffer area by using the log analyzer, performing content matching with the search keywords, keeping the successfully matched log records in the alarm buffer area, and marking the analyzed records;
and the output module is used for continuously extracting the analyzed records from the log buffer area by using the log displayer respectively, outputting the records to the interface log display area, and continuously extracting the records from the alarm buffer area and outputting the records to the interface alarm log display area.
9. An electronic device, characterized in that the electronic device comprises:
at least one processor; and the number of the first and second groups,
a memory communicatively coupled to the at least one processor; wherein the content of the first and second substances,
the memory stores instructions executable by the at least one processor to enable the at least one processor to perform a log browsing method including timely searching as claimed in any one of the preceding claims 1-7.
10. A non-transitory computer readable storage medium storing computer instructions for causing a computer to perform the log browsing method including a timely search according to any one of the preceding claims 1-7.
CN201911240113.8A 2019-12-06 2019-12-06 Log browsing method and device including timely search and electronic equipment Pending CN111176957A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201911240113.8A CN111176957A (en) 2019-12-06 2019-12-06 Log browsing method and device including timely search and electronic equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201911240113.8A CN111176957A (en) 2019-12-06 2019-12-06 Log browsing method and device including timely search and electronic equipment

Publications (1)

Publication Number Publication Date
CN111176957A true CN111176957A (en) 2020-05-19

Family

ID=70657263

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201911240113.8A Pending CN111176957A (en) 2019-12-06 2019-12-06 Log browsing method and device including timely search and electronic equipment

Country Status (1)

Country Link
CN (1) CN111176957A (en)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104883275A (en) * 2015-05-15 2015-09-02 烽火通信科技股份有限公司 Log cache method and system of communication device
CN106385331A (en) * 2016-09-08 2017-02-08 努比亚技术有限公司 Method and system for monitoring alarm based on log
CN107612740A (en) * 2017-09-30 2018-01-19 武汉光谷信息技术股份有限公司 A kind of daily record monitoring system and method under distributed environment
CN110427307A (en) * 2019-06-21 2019-11-08 平安科技(深圳)有限公司 Log analytic method, device, computer equipment and storage medium

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104883275A (en) * 2015-05-15 2015-09-02 烽火通信科技股份有限公司 Log cache method and system of communication device
CN106385331A (en) * 2016-09-08 2017-02-08 努比亚技术有限公司 Method and system for monitoring alarm based on log
CN107612740A (en) * 2017-09-30 2018-01-19 武汉光谷信息技术股份有限公司 A kind of daily record monitoring system and method under distributed environment
CN110427307A (en) * 2019-06-21 2019-11-08 平安科技(深圳)有限公司 Log analytic method, device, computer equipment and storage medium

Similar Documents

Publication Publication Date Title
CN111510760B (en) Video information display method and device, storage medium and electronic equipment
CN111198859B (en) Data processing method, device, electronic equipment and computer readable storage medium
CN110097397B (en) Feedback-based information pushing method and device and electronic equipment
CN109684589B (en) Client comment data processing method and device and computer storage medium
CN111400625B (en) Page processing method and device, electronic equipment and computer readable storage medium
EP4231143A1 (en) Information display method and apparatus, electronic device, and computer readable storage medium
CN111813465B (en) Information acquisition method, device, medium and equipment
CN111258803B (en) Collapse positioning method and device and electronic equipment
CN109902726B (en) Resume information processing method and device
CN111738316A (en) Image classification method and device for zero sample learning and electronic equipment
CN110825481A (en) Method and device for displaying page information corresponding to page tag and electronic equipment
CN112291121B (en) Data processing method and related equipment
CN110908752A (en) Control setting method and device, electronic equipment and interaction system
CN109977279B (en) Method and device for searching online documents in suite
CN110188166B (en) Document searching method and device and electronic equipment
CN112884376A (en) Work order processing method and device, electronic equipment and computer readable storage medium
CN109408387B (en) Page testing method and device
CN111708680A (en) Error reporting information analysis method and device, electronic equipment and storage medium
CN111641690B (en) Session message processing method and device and electronic equipment
CN111274104A (en) Data processing method and device, electronic equipment and computer readable storage medium
US20220365644A1 (en) User interface presentation method and apparatus, computer-readable medium and electronic device
CN111176957A (en) Log browsing method and device including timely search and electronic equipment
CN112688793B (en) Data packet obtaining method and device and electronic equipment
CN112416859B (en) Opinion feedback method and related equipment used in iOS application
CN111787043A (en) Data request method and device

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination