TWI613557B - Method for querying system logs - Google Patents

Abstract

A system log query method is implemented by a log management device that includes N logs sequentially numbered and can transmit R _max pen logs at most when responding to a log query. The system log query method includes the following steps: (A) receiving a request back The transmission number starts from the R _req pen log query command of R _start ; (B) defines the transmission start parameter value K, and determines whether the smallest S in the log number is smaller than R _start according to the query instruction, and the judgment result is If yes, set K=S, otherwise set K=R _start ; and (C) according to the query command, start the return by one of the log numbered K and the log numbered (S+NR _max ). When it is judged that N>R _max , R _req >R _max , and R _req is equal to the predetermined value M, the log of the number (S+NR _max ) to (S+N-1) is returned.

Description

System log query method

The invention relates to a system log query method, in particular to a system log query method capable of querying only the latest system log part.

The system log of the operating system is numbered one by one according to the time, and the log is updated at any time to record the size events occurring at any time in the system. By viewing the system log, the system administrator can keep abreast of the health of the system and create a system recording environment tailored to his needs. By using the system log flexibly, it can provide a more stable computer environment.

In the current system log query method, the system administrator operates a query host to issue a query command to a log management device to request the log management device to return the log. However, after receiving the query command, the log management device can only return from the stored oldest log, and the log management device has a certain upper limit for the number of logs sent each time, so when the log management device When the stored log is more than the maximum number of pens that can be sent each time, the query host often needs to send multiple query commands in batches, so that the log management device returns the log multiple times from the oldest log to the query host. The query host can receive the latest logs. But the system administrator goes It only needs to query the latest logs, so the oldest log starts to return, which not only wastes time, but also wastes memory resources.

Therefore, how to develop an efficient system log query method has become the direction that the relevant industry is trying to study.

Accordingly, it is an object of the present invention to provide a system log query method.

Therefore, the system log query method of the present invention is executed by a group of electronic systems, and the electronic system includes a log storing N logs sequentially numbered and capable of transmitting R _max pen logs at most when responding to a log query. a management device, and an inquiry host connected to the log management device, wherein a minimum of the log numbers is S, the method comprising a step (A), a step (B), and a step ( C).

In step (A), the log management apparatus receives a query command transmitted by the host query, wherein the query instruction requested the return of pen numbers starting from R _req R _start of the log.

In the step (B), the log management device defines a transmission start parameter value K, and determines whether S>R _start according to the query instruction, and sets K=S when the determination result is affirmative, and the determination result is negative. Set K=R _start .

In step (C), the log management device performs, according to the query instruction, a log of the number K and a log of the number (S+NR _max ) to start back to the query host, wherein When the log management device determines that N>R _max , R _req >R _max and R _req is equal to a predetermined value M, the log management device returns the numbers (S+NR _max ) to (S+N-1). These logs are sent to the query host.

The effect of the present invention is that after receiving the query command by the log management device, the latest log with the number (S+NR _max ) to (S+N-1) is returned to the query host, and the number of log transmissions is shortened and time.

1‧‧‧Electronic system

11‧‧‧Log management device

12‧‧‧Query host

201~217‧‧‧Steps

Other features and advantages of the present invention will be apparent from the following description of the embodiments of the present invention. FIG. 1 is a block diagram illustrating a set of electronic systems that perform one embodiment of the system log query method of the present invention; Fig. 2 is a flow chart showing the flow of steps of the embodiment.

Referring to Figures 1 and 2, an embodiment of the system log query method of the present invention is performed by a set of electronic systems 1. The electronic system 1 includes a log management device 11 including a log of N numbers sequentially numbered and capable of transmitting a maximum of R _max pen logs in response to a log query, and a log management device 11 The connected query host 12, wherein a minimum of the numbers of the logs is S. In this embodiment, the lowest number is the oldest log, and the largest number is the latest log, but not Limited. In the embodiment, the log management device 11 takes a just a bunch of disks (JBOD) disk cabinet as an example. The query host 12 takes a server host as an example, but does not use this as an example. limit.

This embodiment of the system log query method of the present invention comprises the following steps.

First, in step 201, the log management unit 11 receives a query command by the host 12 transmits the query, wherein the query instruction requested the return of pen numbers starting from R _req R _start of the log.

Next, in step 202, the log management device 11 determines whether S>R _start according to the query command, and if the determination result is negative, step 203 is performed, and if yes, step 204 is performed.

In step 203, the log management device 11 defines a transfer start parameter value K = _Rstart and proceeds to step 205.

In step 204, the log management device 11 defines a transfer start parameter value K=S and proceeds to step 205.

In step 205, the log management device 11 determines whether N>R _max , and if the determination result is negative, step 206 is performed, and if yes, step 207 is performed.

In step 206, the log management device 11 determines whether (S + N - 1) < (K + R _req - 1), where (S + N - 1) indicates the largest of the numbers of the logs, and (K+R _req -1) indicates that the query command requires the maximum number in the logout log. If the result of the determination is negative, proceed to step 208. If yes, proceed to step 209.

In step 208, the log management device 11 returns the logs numbered K to (K+R _req -1) to the query host 12.

In step 209, the log management device 11 returns the logs numbered K to (S+N-1) to the query host 12.

In the following step 205, in step 207, the log management device 11 determines whether R _req > R _max . If the determination result is negative, step 210 is performed, and if yes, step 211 is performed.

In step 210, the log management device 11 determines whether (S + N - 1) < (K + R _req - 1), and if the result of the determination is negative, step 212 is performed, and if yes, step 213 is performed.

In step 212, the log management device 11 returns the logs numbered K to (K+R _req -1) to the query host 12.

In step 213, the log management device 11 returns the logs numbered K to (S+N-1) to the query host 12.

Next, in step 211, the log management device 11 determines whether R _req is equal to a predetermined value M. If the determination result is negative, step 214 is performed, and if yes, step 215 is performed.

In step 214, the log management device 11 determines whether or not (S + N - 1) < (K + R _max - 1). If the result of the determination is negative, step 216 is performed, and if yes, step 217 is performed.

In step 216, the log management device 11 returns the logs numbered K to (K+R _max -1) to the query host 12.

In step 217, the log management device 11 returns the logs numbered K to (S+N-1) to the query host 12.

Following the step 211, in step 215, the log management device 11 returns the logs numbered (S+NR _max ) to (S+N-1) to the query host 12. In this step, the log management device 11 can only transmit the R _max pen at most when responding to a log query, so the latest log of the number (S+N-1) is pushed forward, and the number is required to be learned ( The log of S+NR _max ) starts to be transmitted.

It should be particularly noted that the query host 12 has data of M before receiving the log back to the log management device 11, but there is no data such as N, S, and R _max , so if the query host 12 wants to When the oldest log starts querying, a query command indicating R _start =0 is issued.

The following steps are illustrated by three examples with S=2001, N=1500, R _max =400, and M=404; wherein, the first and second examples illustrate that the query host 12 needs to start the query from the oldest numbered log. In the case, the third example shows that the query host 12 only needs to query the latest logs.

Example 1: When the query host 12 needs to query a total of 1000 logs starting from the oldest number, first issue a query instruction indicating R _start =0 and R _req = 1000, after the log management device 11 receives the query command The K=2001 is set in step 204, and finally the logs of the numbers 2001~2400 are transmitted in step 216. After the query host 12 receives the logs of the numbers 2001~2400 and learns that S=2001 and _Rmax =400, the query host 12 then generates a query instruction indicating R _start = 2401 and R _req = 400, indicating R _start = The query command of 2801 and R _req = 200 transmits a query command indicating R _start = 2401 and R _req = 400 to the log management device 11. Next, the log management device 11 sets K=2401 in step 203 according to the query command, and finally transmits the logs of the numbers 2401 to 2800 in step 212. Next, the query host 12 transmits a query command indicating R _start = 2801 and R _req = 200 to the log management device 11. Next, the log management device 11 sets K=2801 in step 203 according to the query command, and finally transmits the logs of the numbers 2801 to 3000 in step 212.

Example 2: When the query host 12 needs to query 2000 logs starting from the oldest number, similar to the above steps, the query host 12 issues a query instruction indicating R _start =0 and R _req = 2000, and the log management After the device 11 transmits the logs of the numbers 2001~2400 to the query host 12 according to the query command, the query host 12 sequentially generates a query instruction indicating R _start = 2401 and R _req = 400, indicating R _start = 2801 and R. A query instruction of _req = 400, a query instruction indicating R _start = 3201 and R _req = 400, a query instruction indicating R _start = 3601 and R _req = 400, and sequentially transmitting the query instructions to the log management apparatus 11. However, unlike the first example, after receiving the query command indicating R _start = 3201 and R _req = 400, the log management device 11 transmits the logs of the numbers 3201 to 3500 in step 213. After the query host 12 receives the logs, it is known that the maximum number of all logs is 3500, so the query command indicating R _start =3601 and R _req =400 will not be sent any more.

Example 3: When the query host 12 only needs the latest logs, a query instruction indicating R _start =0 and R _req = 404 is issued, and after receiving the query command, the log management device 11 sets K in step 204. =S, finally at step 215, the number is returned to (S+NR _max )~(S+N-1), that is, the logs with the number 3101~3500 are returned to the query host 12. However, although R _start =0 in the present embodiment, it may be other values. Specifically, in the present example, the query host 12 causes the log management device 11 to determine that R _req is equal to M after a data back is set by setting R _req equal to the predetermined value M in the query command. The latest R _max pen log was returned during the pass.

In summary, the system log query method of the present invention, when the system administrator needs to query the latest log, the query host 12 transmits the query command indicating R _req =M to the log management device 11, and the log is made. The management device 11 determines that it is necessary to return the latest R _max pen log. Thus, only one backhaul of the log management device 11 is required, and the query host 12 can obtain the latest R _max pen log, which enables the query. The latest log is quite efficient, so it is indeed possible to achieve the object of the present invention.

However, the above description is only for the embodiments of the present invention, and the scope of the present invention cannot be limited thereto, and the scope and patent description of the patent application according to the present invention. The simple equivalent changes and modifications made by the contents of the book are still within the scope of the invention patent.

201~217‧‧‧Steps

Claims (7)

A system log query method is performed by a group of electronic systems, and the electronic system includes a log management device that stores N logs sequentially numbered and can transmit R _max pen logs at most when responding to a log query. And a query host connected to the log management device, wherein a minimum of the log numbers is S, the system log query method includes the following steps: (A) the log management device receives a host by the query The transmitted query instruction, wherein the query instruction requires a return log number starting from R _start of the R _req pen log; (B) the log management device defines a transfer start parameter value K, and determining whether the S> is based on the query command R _start , and set K=S when the judgment result is affirmative, and K=R _start when the judgment result is negative; and (C) the log management device performs the log numbered by K and the number according to the query instruction One of the logs for (S+NR _max ) starts to be passed back to the query host, wherein when the log management device determines that N>R _max , R _req >R _max , and R _req is equal to a predetermined value M , the The log management device returns the logs numbered (S+NR _max ) to (S+N-1) to the query host. The system log query method of claim 1, wherein in step (C), the log management device determines N according to the query instruction When R _max and (S+N-1)<(K+R _req -1), the log management device returns the logs numbered K to (S+N-1) to the query host. The system log query method of claim 1, wherein in step (C), the log management device determines N according to the query instruction R _max and (S+N-1) (K+R _req -1), the log management device returns the logs numbered K to (K+R _req -1) to the query host. The system log query method according to claim 1, wherein in step (C), when the log management device determines N>R _max according to the query instruction, and R _req R _max and (S+N-1) (K+R _req -1), the log management device returns the logs numbered K to (K+R _req -1) to the query host. The system log query method of claim 1, wherein in step (C), the log management device determines N>R _max and R _req according to the query instruction. When R _max and (S+N-1)<(K+R _req -1), the log management device returns the logs numbered K to (S+N-1) to the query host. The system log query method of claim 1, wherein, in step (C), the log management device determines N>R _max , R _req >R _max , R _req ≠M according to the query instruction, and (S) +N-1) (K+R _max -1), the log management device returns the logs numbered K to (K+R _max -1) to the query host. The system log query method of claim 1, wherein, in step (C), the log management device determines N>R _max , R _req >R _max , R _req ≠M according to the query instruction, and (S) When +N-1)<(K+R _max -1), the log management device returns the logs numbered K to (S+N-1) to the query host.