WO2021057383A1 - Log query method, apparatus, device, and computer-readable storage medium - Google Patents

Log query method, apparatus, device, and computer-readable storage medium Download PDF

Info

Publication number
WO2021057383A1
WO2021057383A1 PCT/CN2020/112212 CN2020112212W WO2021057383A1 WO 2021057383 A1 WO2021057383 A1 WO 2021057383A1 CN 2020112212 W CN2020112212 W CN 2020112212W WO 2021057383 A1 WO2021057383 A1 WO 2021057383A1
Authority
WO
WIPO (PCT)
Prior art keywords
log
query
log query
operation instruction
page
Prior art date
Application number
PCT/CN2020/112212
Other languages
French (fr)
Chinese (zh)
Inventor
卢道和
杨军
陈广胜
陈翼
Original Assignee
深圳前海微众银行股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 深圳前海微众银行股份有限公司 filed Critical 深圳前海微众银行股份有限公司
Publication of WO2021057383A1 publication Critical patent/WO2021057383A1/en

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/30Information retrieval; Database structures therefor; File system structures therefor of unstructured textual data
    • G06F16/33Querying
    • G06F16/3331Query processing
    • G06F16/334Query execution
    • G06F16/3344Query execution using natural language analysis
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/30Information retrieval; Database structures therefor; File system structures therefor of unstructured textual data
    • G06F16/33Querying
    • G06F16/338Presentation of query results

Definitions

  • This application relates to the technical field of financial technology (Fintech), in particular to log query methods, devices, equipment, and computer-readable storage media.
  • the business platform records operating information in the form of logs, allowing operation and maintenance personnel to analyze the logs for troubleshooting.
  • the current business platforms are related to each other, and when a business platform fails, it will often This has an impact on other business platforms associated with it. Operation and maintenance personnel need to log in to each business platform and query the logs generated by each business platform. Such a log query operation method is more complicated.
  • the main purpose of this application is to propose a log query method, device, equipment, and computer-readable storage medium, which aims to solve the technical problem of complex operations in the current log query process.
  • this application provides a log query method, which includes the following steps:
  • An operation instruction triggered based on the log query page is received, and the operation instruction is executed to complete the log query operation.
  • the log query method further includes:
  • a preset collection interface After receiving a log collection instruction, call a preset collection interface to collect logs generated by a business platform, and obtain attributes of the logs, where the attributes include collection time, business platform identification, log source IP address, and log identification;
  • the log is associated with the attribute and saved to a preset log database.
  • the log query method before the step of generating a log query page containing the log according to the log fed back by the preset data interface, the log query method further includes:
  • the step of generating a log query page containing the log according to the log fed back by the preset data interface includes:
  • a functional component is added to the preset area of the log list to generate a log query page containing the log.
  • the step of receiving an operation instruction triggered based on the log query page and executing the operation instruction to complete the log query operation includes:
  • the log query method further includes:
  • the page number corresponding to the page turning operation instruction is used as the second query dimension
  • the log query method further includes:
  • Acquire historical operation behavior data corresponding to the user identifier determine an operation instruction according to the historical operation behavior data, and execute the operation instruction.
  • the log query method before the step of receiving the log query request and obtaining the first query dimension corresponding to the log query request, the log query method further includes:
  • Receiving the abnormal prompt sent by the service platform acquiring the platform identifier of the service platform as the first query dimension, and triggering a log query request based on the first query dimension.
  • this application also provides a log query device, the log query device including:
  • the request receiving module is configured to obtain the first query dimension corresponding to the log query request after receiving the log query request;
  • the query and acquisition module is configured to call a preset data interface to query a preset log database, and obtain the log corresponding to the first query dimension through the preset data interface;
  • a receiving and generating module configured to generate a log query page containing the log according to the log fed back by the preset data interface
  • the first execution module is configured to receive an operation instruction triggered based on the log query page, and execute the operation instruction to complete the log query operation
  • the present application also provides a log query device, the log query device includes: a memory, a processor, and a log query program stored on the memory and running on the processor, so When the log query program is executed by the processor, the steps of the log query method described above are implemented.
  • the present application also provides a computer-readable storage medium having a log query program stored on the computer-readable storage medium, and when the log query program is executed by a processor, the log query as described above is realized. Method steps.
  • This application provides a log query method, device, equipment, and computer-readable storage medium.
  • the log query device queries the log database by calling the preset data interface.
  • the preset data interface obtains the logs of each business platform and sends them to the log query device.
  • the log query device receives the logs of each business platform and generates logs containing the logs.
  • the query page allows operation and maintenance personnel to perform log query operations based on the log query page, which improves the operational convenience of log query and further improves log query efficiency.
  • FIG. 1 is a schematic diagram of a device structure of a hardware operating environment involved in a solution of an embodiment of the present application
  • FIG. 2 is a schematic flowchart of the first embodiment of the application log query method
  • FIG. 3 is a schematic flowchart of a third embodiment of an application log query method
  • FIG. 4 is a schematic flowchart of a fourth embodiment of an application log query method
  • Fig. 5 is a schematic diagram of functional modules of an embodiment of the log query device of the application.
  • FIG. 1 is a schematic diagram of the device structure of the hardware operating environment involved in the solution of the embodiment of the present application.
  • the log query device in the embodiment of the present application may be a PC or a server.
  • the log query device may include: a processor 1001, such as a CPU, a network interface 1004, a user interface 1003, a memory 1005, and a communication bus 1002.
  • the communication bus 1002 is configured to implement connection and communication between these components.
  • the user interface 1003 may include a display screen (Display) and an input unit such as a keyboard (Keyboard), and the optional user interface 1003 may also include a standard wired interface and a wireless interface.
  • the network interface 1004 may optionally include a standard wired interface and a wireless interface (such as a WI-FI interface).
  • the memory 1005 may be a high-speed RAM memory, or a stable memory (non-volatile memory), such as a magnetic disk memory.
  • the memory 1005 may also be a storage device independent of the aforementioned processor 1001.
  • FIG. 1 does not constitute a limitation on the device, and may include more or fewer components than those shown in the figure, or a combination of certain components, or different component arrangements.
  • a memory 1005 as a computer storage medium may include an operating system, a network communication module, a user interface module, and a log query program.
  • the network interface 1004 is mainly configured to connect to the back-end server and communicate with the back-end server;
  • the user interface 1003 is mainly configured to connect to the client (user side) and communicate with the client;
  • the processor 1001 can be configured to call the log query program stored in the memory 1005 and perform the operations in the following log query method.
  • the method implemented when the log query program running on the processor is executed can refer to the log query method of this application. The various embodiments will not be repeated here.
  • the current application is deployed on multiple Linux servers, and the operation and maintenance personnel need to search the logs of a specific keyword of a certain application.
  • the log search methods usually used include: 1. The operation and maintenance personnel log in to the Linux server one by one and jump to Corresponding log directory, and use Linux native commands such as less, vim and other commands to open the log file, and enter keywords to search for log keywords; 2. The operation and maintenance personnel write Shell or Python scripts, and log in to multiple applications through the designated bastion machine. Server, at the same time handwriting Linux query keyword log commands such as grep command, etc., return the matched keyword logs to the designated bastion machine, and display the log content obtained by grep to the page; 3. Operation and maintenance personnel use the open source ELK suite , Write the collected application logs to Elastic Search logs rely on the log search interface provided by Kibana for conditional searches.
  • the current log search methods all have shortcomings, namely, 1.
  • the operation and maintenance personnel log in to multiple Linux servers and search the logs, obviously, the operation efficiency is very low, which is not conducive to quickly locating the problem; 2.
  • the operation and maintenance personnel rely on Shell or Python scripts to automatically Logging in to multiple servers to search for scripts requires the operation and maintenance personnel to edit the search commands each time.
  • the search threshold is high and error-prone, and it is necessary to log in to multiple application machines each time. If you encounter a scenario where multiple people search at the same time, the application The pressure on the server will also be greater; 3.
  • the operation and maintenance personnel can see the search results with the help of ELK's Kibana log interface search, the search dimensions are limited, and they can only search for logs containing keywords, and cannot search further or cannot See logs outside of search results.
  • An operation instruction triggered based on the log query page is received, and the operation instruction is executed to complete the log query operation.
  • the log query device in this embodiment can optionally install Elastic Search, Elastic Search is a distributed, high-scalable, high-real-time search and data analysis engine based on Lucene.
  • Elastic Search is implemented based on a RESTful web interface (the implementation steps of Elastic Search include: submit data to Elastic Search database; then use the word segmentation controller to segment the corresponding sentence, and store its weight and segmentation results into the data; when the user searches for the data, the results are ranked and scored according to the weight, and then the results are returned to the user ).
  • the logs generated by the business platform are searched based on Elastic Search.
  • Elastic Search collects the log information of each business platform and stores the collected logs in the distributed cluster of Elastic Search. Then, Elastic Search Search analyzes and processes the collected logs, specifically including word segmentation processing on the logs, adding weights and other operations, and extracting feature information in the logs.
  • Elastic Search receives the search instructions sent by the operation and maintenance personnel, Elastic Search obtains the search instructions And compare the keywords with the characteristic information of each log, and output the log search results.
  • Elastic Search to the log search process can effectively improve the efficiency of log query.
  • the existing search process if the search results returned by Elastic Search are inaccurate, the user can only perform multiple searches by changing keywords.
  • Elastic Search to view logs other than the search results, the user needs to log in to other pages of this business platform or log in to other platforms to query, which is more complicated.
  • business platform A, business platform B, and business platform C are interrelated business platforms.
  • business platform A alarms abnormally, if the user wants to enter "error" in the interface of Elastic Search, it can be used to correct business platform A and business platform B.
  • Search the log corresponding to business platform C, and the log containing "error" is only the log generated by business platform A, and the data of business platform B and business platform C cannot be queried.
  • the user needs to query business platform B and business platform C
  • Corresponding logs are used to determine whether business platform B and business platform C are affected. The user needs to log in to business platform B and business platform C and input corresponding query instructions to perform retrospective query. Such user operations are more complicated.
  • the embodiment of this application is an improvement made in response to the above situation.
  • the log query method in this embodiment is applied to a log query device.
  • the log query device is in communication connection with the Elastic Search cluster, and the Elastic Search cluster communicates with multiple service platforms through interfaces. Therefore, the log query device can query the logs of multiple business platforms (business subsystems). Before the log query operation, the log query device performs log collection operations in advance, specifically including:
  • call the preset collection interface to collect the logs generated by the business platform, obtain the attributes of the logs, and associate the logs with the attributes and save them to a preset log database.
  • the log query device receives the log collection instruction
  • the trigger method of the log collection instruction is not specifically limited.
  • the log query device calls the preset collection interface (the preset collection interface can be a preset Elastic Search log collection interface, which can also be an interface re-developed by operation and maintenance personnel) Collect logs generated by the business platform and obtain the attributes of each log.
  • the attributes include the collection time and the business platform identifier (the business platform identifier is the identifier of the unique business platform) Information, such as business platform name or business platform number), log source IP address, and log identifier; the log query device associates the log with the attributes corresponding to the log and saves it to the preset log database.
  • the preset log database refers to the preset log database.
  • the database for storing log information, the preset log database can be set in a distributed cluster.
  • the log query device collects the logs of each service platform by calling the preset collection interface, and associates the log with the attributes corresponding to the log and saves it to the preset log database.
  • the log query device receives the log query request, it queries The preset log database obtains logs of different business platforms, so that users do not need users to log in to multiple business platforms, specifically:
  • FIG. 2 is a schematic flowchart of a first embodiment of a log query method of this application, and the log query method includes:
  • Step S10 A log query request is received, and a first query dimension corresponding to the log query request is obtained.
  • the log query device receives the log query request
  • the trigger method of the log query request is not specifically limited, that is, the log query request can be triggered by the user actively, for example, the user enters the query xxx service platform on the display interface corresponding to the log query device
  • the log query request can also be automatically triggered by the log query device.
  • the log query condition is preset in the log query device: the log query is automatically performed in the early morning of every day, and the log query device arrives in the early morning. The log query request is triggered automatically.
  • the log query device When the log query device receives the log query request, the log query device obtains the first query dimension corresponding to the log query request.
  • the first query dimension may be the time dimension of log collection, the spatial dimension of log storage, the spatial dimension of log generation, and so on.
  • Step S20 Invoke a preset data interface to query a preset log database, and obtain a log corresponding to the first query dimension through the preset data interface.
  • the log query device calls the preset data interface (the preset data interface refers to the preset data interface for users to query the logs of each business platform, for example, the preset data interface can be understood as the data interface corresponding to the Elastic Search cluster) to query the preset
  • the log database specifically, the preset data interface is associated with a data analysis script, and the preset data interface obtains the log corresponding to the first query dimension in the preset log database by running the data analysis script.
  • the first query dimension is the log generated by the xxx business platform, and the business query device calls the preset data interface to query the preset log database to obtain the logs generated by the xxx business platform in the log database; for another example, the first query dimension is 2019 On September 10, the business query device called the preset data interface to query the preset log database, and obtained the logs collected on September 10, 2019 in the log database.
  • the preset data interface feeds back the log corresponding to the first query dimension to the log query device, so that the log query device processes the log, specifically:
  • Step S30 Generate a log query page containing the log according to the log fed back by the preset data interface.
  • the log query device receives the log fed back by the preset data interface, and the log query device types out the log to generate a log query page containing the log.
  • a specific implementation method for the log query device to typeset the log and generate the log query page is given, specifically including:
  • Step a1 receiving a display configuration request, and outputting a display configuration prompt to prompt the user to configure the display configuration information of the log query page;
  • Step a2 Obtain display configuration information input based on the display configuration prompt.
  • the log query device is preset to display configuration information.
  • the display configuration information can be understood as the format information of the log query page. That is, the log query device receives the display configuration request, and the trigger mode of the display configuration request is not specifically limited.
  • the log query device When receiving a display configuration request, the log query device outputs a display configuration prompt to prompt the user to configure the display configuration information of the log query page. For example, the user can set the display configuration prompt based on the display configuration prompt: the formatting format is 10 logs per page, and the log query device obtains Display configuration information entered based on the display configuration prompt.
  • the log query device generates a log query page based on the set display configuration information, specifically, including:
  • Step b1 generating a display template according to the display format in the display configuration information, and adding the log fed back by the preset data interface to the display template to obtain a log list;
  • Step b2 Add a functional component to the preset area of the log list to generate a log query page containing the log.
  • the log query device receives the log feedback from the Elastic Search data interface.
  • the log query device obtains the display format in the display configuration information, and generates a display template according to the display format; for example, if the display format is n rows and 2 columns, the log query device generates one n rows Two-column display template.
  • the log query device will collect 300 logs corresponding to the first query dimension, and the log query device will input 300 logs into the first column of the display template in turn, and enter the attributes of the logs into the display template.
  • the log list is obtained in the second column, and functional components are added to the edge area of the log list (function components include but not limited to page turning component, scrolling component, jump component, search component, etc.) to generate a log query page containing logs.
  • the log query device based on the set display configuration information, generating the log query page may also include:
  • a functional component is added to the preset area of the log list to generate a log query page containing the log.
  • the log display dimensions include but are not limited to: the system type corresponding to the log, the log source IP, etc., and then combine the display dimensions and the display template to display the log, which improves the flexibility of log display and the flexibility and accuracy of subsequent log queries. Sex and query efficiency.
  • Step S40 Receive an operation instruction triggered based on the log query page, and execute the operation instruction to complete the log query operation.
  • the log query device receives operation instructions triggered based on the log query page, that is, the log query page also provides shortcut key functions, including page down, page up, jump to the front of the log, jump to the end of the log, and search for the next keyword Operation and maintenance personnel can trigger operation requests based on the functional components in the log query page, and the log query device receives operation instructions triggered based on the log query page, and executes the operation instructions to complete the log query operation.
  • the operation instruction triggered by the log query page may be triggered in the log page to realize the log switch query of the page. In addition, it can also be triggered after one of the logs is selected. In this case, when the switching operation is performed, the selected patent is inquired up and down, so as to realize the traceability of the specific situation of the log.
  • the log query device implements log traceability based on operation instructions, that is, the log query device implements switching from one log to the previous log of the log, the next log, or other services of the same business level according to the operation instruction.
  • the log query device communicates with business platform A and business platform B.
  • Business platform A is the upstream business system of business platform B.
  • the user enters the keyword: "error" in the log query page, and the log query page Highlight the error log containing "error”.
  • the error log may be generated by business platform A or business platform B. The user jumps from the first log of business platform A to the second log of business platform B through the shortcut key.
  • the embodiment of the application can also provide shortcut keys that meet the routine search of operation and maintenance personnel. Specifically, it can be detected that the mouse cursor is hovering to the functional component on the log query page. When any functional component is not clicked, a prompt message prompting the corresponding function of each shortcut key is output.
  • output prompt information For example, output prompt information: Shift+F means to page to the new log; Shift+B means to page to the old log (the log can be scrolled back and forth through the above two functions); Shift+G means to jump to the log Foremost; Shift+H means to jump to the end of the log (through the above two shortcut keys and the cooperation with forward and backward pages, you can quickly browse the new and old logs); Shift+N cooperates with the keyword function component
  • the search function can realize the keyword search for matching jumps one by one (the operation and maintenance personnel can search for each matching keyword log and log context content).
  • log query page In addition, in order to improve the accuracy and efficiency of log query, other operations are supported on the log query page. For example, after the user selects a log, a small floating window will pop up on the log query page, prompting the user to slide left and right You can turn the page up and down to turn to the previous log that caused the log (to trace the reason of the previous log), click to jump to the top (to trace the cause of the log's initial log), and double-click to skip To the end (to achieve a preview of the log termination reason for the log), etc.; for another example, after the user selects a specified area of the log query page, the log query page will be partially zoomed according to the user's operation instructions (such as scrolling by sliding the mouse) .
  • the log query device queries the log database by calling the preset data interface.
  • the preset data interface obtains the logs of each business platform and sends them to the log query device.
  • the log query device receives the logs of each business platform and generates a log query containing the logs.
  • the page allows operation and maintenance personnel to perform log query operations based on the log query page, which improves the operational convenience of log query and further improves log query efficiency.
  • the technical solution in this embodiment is applied to the financial field, for example, in the deposit/loan product of a banking institution or the log query page of the system.
  • Elastic Search Based on the full-text search capability of Elastic Search, it provides a log search habit of operation and maintenance personnel With full-text search function, operation and maintenance personnel do not need to manually log in to multiple business platforms, and do not need to enter various search commands.
  • Through a centralized log query page they can search for multiple corresponding business platform logs in seconds, and view the context of the logs. Realize the functions of page down, page up, jump to the front of the log, jump to the end of the log, search for the next keyword, etc., making user operations more convenient.
  • This embodiment is a step before step S10 in the first embodiment.
  • a specific implementation method for triggering a log query request is given, including:
  • Receiving the abnormal prompt sent by the service platform acquiring the platform identifier of the service platform as the first query dimension, and triggering a log query request based on the first query dimension.
  • the log query device monitors each service platform in real time.
  • the service platform sends an exception notification to the log query device
  • the log query device detects the business platform abnormality
  • the log query device detects the business platform abnormality
  • the log query device obtains the platform identifier of the business platform as the first query dimension
  • the log query device triggers the log query request based on the first query dimension.
  • the log query device automatically triggers the log query request by detecting the status of each service platform, which makes the log query operation more convenient.
  • This embodiment is a refinement of step S40 in the first embodiment.
  • the difference between this embodiment and the first embodiment lies in:
  • Step S41 Receive an operation instruction triggered based on the log query page, and determine whether the operation instruction contains a keyword.
  • the log query device receives the operation instruction triggered based on the log query page, and the log query device determines whether the operation instruction contains keywords. For example, a keyword input box is set on the log query page. If the user enters the keyword in the keyword input box, And click the search component of the log query page, the operation instruction contains keywords; the user does not enter the keyword in the keyword input box, but directly clicks the jump component of the log query page, the operation instruction does not contain the keyword.
  • keywords For example, a keyword input box is set on the log query page. If the user enters the keyword in the keyword input box, And click the search component of the log query page, the operation instruction contains keywords; the user does not enter the keyword in the keyword input box, but directly clicks the jump component of the log query page, the operation instruction does not contain the keyword.
  • Step S42 If it is determined that the operation instruction contains a keyword, query the log through the preset data interface to obtain a target log containing the keyword.
  • the log query device queries the log corresponding to the first query dimension through the preset data interface to obtain the target log containing the keyword.
  • the log query device queries the first query via the preset data interface The log corresponding to the dimension, get the target log containing the keyword,
  • the log query device displays the query operation process of the preset data interface to facilitate the user to view.
  • the log query device can send the user's operation instructions To the preset data interface, the preset data interface is executed according to the user's operating instructions.
  • Step S43 Update the log query page according to the target log fed back by the preset data interface.
  • the log query device receives the target log fed back by the preset data interface, and the log query device updates the log on the log query page to the target log.
  • the log query device updates the log query page according to the user's operation instruction for the user to view .
  • the user enters keywords in the data search bar of the terminal Baidu.
  • the Baidu search engine searches according to the keywords and sends the search results to the terminal.
  • the user cannot View the data source of Baidu search engine, users can only see the search results.
  • This embodiment is an improvement based on this.
  • the log query device calls the preset data interface to query the log database.
  • the preset data interface obtains the logs of each business platform and sends them to the log query device.
  • the log query device obtains the logs of each business platform.
  • the query device uses the logs of each business platform as the data source to simulate the preset query operation, that is, the preset data interface sends the target log to the log query device, and the log query device receives the target log fed back by the preset data interface, and The log on the log query page is updated to the target log.
  • This embodiment is a refinement of step S40 in the first embodiment.
  • This embodiment is a step after step S41 in the third embodiment.
  • the difference between this embodiment and the above-mentioned embodiment lies in:
  • Step S44 If it is determined that the operation instruction does not contain a keyword, when the operation instruction is a page turning operation instruction, the page number corresponding to the page turning operation instruction is used as the second query dimension.
  • the log query device determines whether the operation instruction is a page turning operation instruction. When the operation instruction is not a page turning operation instruction, the log query device determines the operation instruction type, and determines the second query dimension according to the operation instruction type, for example , The user can click the xxxIP address on the log query page, and the log query device will use the xxxIP address as the second query dimension.
  • the log query device When the operation instruction is a page turning operation instruction, the log query device obtains the page number corresponding to the page turning operation instruction, and uses the page as the second query dimension. For example, the user can click on the log query page to jump to the next page, and the log query device Use the log range on the next page as the second query dimension.
  • the triggering method of the page turning operation instruction is not specifically limited, that is, the page turning operation instruction may be triggered when the user presses a shortcut key, a combination key, or inputs a preset operation in a floating window on the page.
  • Step S45 Obtain the target log corresponding to the second query dimension through the preset data interface, and update the log query page according to the target log fed back by the preset data interface.
  • the log query device queries the logs through the preset data interface to determine the target log corresponding to the second query dimension.
  • the preset data interface sends the target log to the log query device, the log query device receives the target log, and the log query device will The log is updated as the target log, that is, for example, the log in the current log query page is item 1 to item 10, and the user clicks on the log query page: "Skip to the end of the log", the preset data interface query log determines the last Target log, the preset data interface sends the final target log to the log query device, and the log query device receives the target log fed back by the preset data interface, and updates the log in the log query page to the target log.
  • the log query device determines the second query dimension through the operation instructions to limit the search range, thereby achieving faster and more accurate log search.
  • This embodiment is a step after step S30 in the first embodiment.
  • the difference between this embodiment and the first embodiment lies in:
  • the user identification of the currently logged-in user is acquired.
  • Acquire historical operation behavior data corresponding to the user identifier determine an operation instruction according to the historical operation behavior data, and execute the operation instruction.
  • the log query device obtains the user ID of the currently logged-in user (user ID refers to the identification information that uniquely identifies the logged-in user, such as user account information).
  • the log query device obtains the historical operation behavior data corresponding to the user identification.
  • the historical operation behavior data includes user browsing time, browsing frequency, etc.; the log query device determines the operation instruction according to the historical operation behavior data, and executes the operation instruction.
  • the log query device determines the operation instruction based on the historical operation behavior data can be implemented in different ways: Method 1: The log query device uses the most frequent historical operation instruction in the historical operation behavior data as the operation instruction; Method 2: The log query device uses the historical operation behavior Determine the trigger time of each historical operation instruction in the data, and determine the operation instruction. For example, the current time is 15:00, and the historical operation behavior data is from 14:00 to 16:00. Users usually query the log of business platform A, and the log query device triggers the log query of business platform A. Operation instructions.
  • the log query device automatically triggers operation instructions according to the user's historical operation behavior data, which can effectively reduce user operations and improve log query efficiency.
  • an embodiment of the present application further provides a log query device, and the log query device includes:
  • the request receiving module 10 is configured to obtain the first query dimension corresponding to the log query request after receiving the log query request;
  • the query obtaining module 20 is configured to call a preset data interface to query a preset log database, and obtain the log corresponding to the first query dimension through the preset data interface;
  • Receiving and generating module 30 configured to generate a log query page containing the log according to the log fed back by the preset data interface
  • the first execution module 40 is configured to receive an operation instruction triggered based on the log query page, and execute the operation instruction to complete the log query operation.
  • the log query device includes:
  • the log collection module is configured to, after receiving the log collection instruction, call the preset collection interface to collect logs generated by the service platform, and obtain attributes of the logs, where the attributes include collection time, service platform identification, and log source IP address And log identification;
  • the associated storage module is configured to associate and save the log and the attribute to a preset log database.
  • the log query device includes:
  • the receiving output module is configured to output a display configuration prompt after receiving a display configuration request to prompt the user to configure the display configuration information of the log query page;
  • a configuration obtaining module configured to obtain display configuration information input based on the display configuration prompt
  • the receiving and generating module 30 includes:
  • the first generating unit is configured to generate a display template according to the display format in the display configuration information
  • the second generating unit is configured to add the log fed back by the preset data interface to the display template to obtain a log list , Adding a functional component to the preset area of the log list to generate a log query page containing the log.
  • the first execution module 40 includes:
  • a receiving judgment unit configured to receive an operation instruction triggered based on the log query page, and determine whether the operation instruction contains a keyword
  • a query determining unit configured to, after determining that the operation instruction contains a keyword, query the log through the preset data interface to obtain a target log containing the keyword;
  • the log on the log query page is updated to the target log.
  • the first execution module 40 includes:
  • a dimension obtaining unit configured to, after determining that the operation instruction does not contain a keyword, when the operation instruction is a page turning operation instruction, use the page number corresponding to the page turning operation instruction as the second query dimension;
  • the log update unit is configured to obtain the target log corresponding to the second query dimension through the preset data interface, and update the log query page according to the target log fed back by the preset data interface.
  • the log query device includes:
  • An identification acquisition module configured to acquire the user identification of the currently logged-in user after determining that the operation instruction triggered based on the log query page is not received within a preset time period;
  • the second execution module is configured to obtain historical operation behavior data corresponding to the user identifier, determine an operation instruction according to the historical operation behavior data, and execute the operation instruction.
  • the log query device includes:
  • the request triggering module is configured to obtain the platform identifier of the service platform as the first query dimension after receiving the abnormal prompt sent by the service platform, and trigger the log query request based on the first query dimension.
  • the technical solution of this application essentially or the part that contributes to the existing technology can be embodied in the form of a software product, and the computer software product is stored in a storage medium (such as ROM/RAM) as described above. , Magnetic disk, optical disk), including several instructions to make a server device (can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) execute the method described in each embodiment of the present application.
  • a server device can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computational Linguistics (AREA)
  • Data Mining & Analysis (AREA)
  • Databases & Information Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Artificial Intelligence (AREA)
  • Debugging And Monitoring (AREA)

Abstract

relating to the technical field of fintech; disclosed is a log query method, said method comprising: receiving a log query request, and obtaining a first query dimension corresponding to the log query request (S10); invoking a preset data interface to query a preset log database, and obtaining by means of the preset data interface a log corresponding to the first query dimension (S20); according to the log fed back by the preset data interface, generating a log query page containing the log (S30); receiving an operation instruction triggered on the basis of the log query page, and executing the operating instruction to complete a log query operation (S40). Also disclosed are a log query apparatus, device, and computer-readable storage medium.

Description

日志查询方法、装置、设备及计算机可读存储介质Log query method, device, equipment and computer readable storage medium
本申请要求于2019年9月23日提交中国专利局、申请号为201910903316.4,申请名称为“日志查询方法、装置、设备及计算机可读存储介质”的中国专利申请的优先权,其全部内容通过引用结合在本申请中。This application claims the priority of a Chinese patent application filed with the Chinese Patent Office on September 23, 2019, the application number is 201910903316.4, and the application name is "log query method, device, equipment, and computer-readable storage medium". The entire content of the application is approved The reference is incorporated in this application.
技术领域Technical field
本申请涉及金融科技(Fintech)技术领域,尤其涉及日志查询方法、装置、设备及计算机可读存储介质。This application relates to the technical field of financial technology (Fintech), in particular to log query methods, devices, equipment, and computer-readable storage media.
背景技术Background technique
随着互联网技术,尤其是互联网金融科技(Fintech)的飞速发展,越来越多的技术(大数据、分布式、区块链Blockchain、人工智能等)应用在金融领域,金融业务平台也越来越多。With the rapid development of Internet technology, especially Internet financial technology (Fintech), more and more technologies (big data, distributed, blockchain, artificial intelligence, etc.) are applied in the financial field, and financial business platforms are also increasing. more.
业务平台运行过程中难免会出现故障,因而业务平台以日志的形式记录运行信息,使得运维人员通过分析日志进行故障排查,当前各业务平台之间相互关联,在一个业务平台出现故障时往往会对与之关联的其他业务平台造成影响,运维人员需要登录各个业务平台,查询各个业务平台产生的日志,这样的日志查询操作方法较为复杂。It is inevitable that there will be failures during the operation of the business platform. Therefore, the business platform records operating information in the form of logs, allowing operation and maintenance personnel to analyze the logs for troubleshooting. The current business platforms are related to each other, and when a business platform fails, it will often This has an impact on other business platforms associated with it. Operation and maintenance personnel need to log in to each business platform and query the logs generated by each business platform. Such a log query operation method is more complicated.
技术解决方案Technical solutions
本申请的主要目的在于提出一种日志查询方法、装置、设备及计算机可读存储介质,旨在解决当前日志查询过程中操作复杂的技术问题。The main purpose of this application is to propose a log query method, device, equipment, and computer-readable storage medium, which aims to solve the technical problem of complex operations in the current log query process.
为实现上述目的,本申请提供一种日志查询方法,所述日志查询方法包括如下步骤:In order to achieve the above objective, this application provides a log query method, which includes the following steps:
接收到日志查询请求,获取所述日志查询请求对应的第一查询维度;After receiving the log query request, obtain the first query dimension corresponding to the log query request;
调用预设数据接口查询预设的日志数据库,通过所述预设数据接口获取所述第一查询维度对应的日志;Call a preset data interface to query a preset log database, and obtain a log corresponding to the first query dimension through the preset data interface;
根据所述预设数据接口反馈的所述日志,生成包含所述日志的日志查询页面;Generating a log query page containing the log according to the log fed back by the preset data interface;
接收基于所述日志查询页面触发的操作指令,执行所述操作指令,以完成日志查询操作。An operation instruction triggered based on the log query page is received, and the operation instruction is executed to complete the log query operation.
在一实施例中,所述日志查询方法,还包括:In an embodiment, the log query method further includes:
接收到日志采集指令,调用预设采集接口采集业务平台产生的日志,并获取所述日志的属性,其中,所述属性包括采集时间、业务平台标识、日志来源IP地址和日志标识;After receiving a log collection instruction, call a preset collection interface to collect logs generated by a business platform, and obtain attributes of the logs, where the attributes include collection time, business platform identification, log source IP address, and log identification;
将所述日志与所述属性关联保存至预设的日志数据库。The log is associated with the attribute and saved to a preset log database.
在一实施例中,所述根据所述预设数据接口反馈的所述日志,生成包含所述日志的日志查询页面的步骤之前,所述日志查询方法还包括:In an embodiment, before the step of generating a log query page containing the log according to the log fed back by the preset data interface, the log query method further includes:
接收到显示配置请求,输出显示配置提示,以提示用户配置日志查询页面的显示配置信息;After receiving the display configuration request, output the display configuration prompt to prompt the user to configure the display configuration information of the log query page;
获取基于所述显示配置提示输入的显示配置信息;Acquiring display configuration information input based on the display configuration prompt;
所述根据所述预设数据接口反馈的所述日志,生成包含所述日志的日志查询页面的步骤,包括:The step of generating a log query page containing the log according to the log fed back by the preset data interface includes:
根据所述显示配置信息中的显示格式生成显示模板,将所述预设数据接口反馈的所述日志添加到所述显示模板中得到日志列表;Generating a display template according to the display format in the display configuration information, and adding the log fed back by the preset data interface to the display template to obtain a log list;
在所述日志列表预设区域添加功能组件,生成包含所述日志的日志查询页面。A functional component is added to the preset area of the log list to generate a log query page containing the log.
在一实施例中,所述接收基于所述日志查询页面触发的操作指令,执行所述操作指令,以完成日志查询操作的步骤,包括:In an embodiment, the step of receiving an operation instruction triggered based on the log query page and executing the operation instruction to complete the log query operation includes:
接收基于所述日志查询页面触发的操作指令,判断所述操作指令中是否包含关键字;Receiving an operation instruction triggered based on the log query page, and determining whether the operation instruction contains a keyword;
若确定所述操作指令中包含关键字,则通过所述预设数据接口查询所述日志,得到包含所述关键字的目标日志;If it is determined that the operation instruction contains a keyword, query the log through the preset data interface to obtain a target log containing the keyword;
根据所述预设数据接口反馈的目标日志更新所述日志查询页面。Update the log query page according to the target log fed back by the preset data interface.
在一实施例中,所述接收基于所述日志查询页面触发的操作指令,判断所述操作指令中是否包含关键字的步骤之后,所述日志查询方法还包括:In an embodiment, after the step of receiving an operation instruction triggered based on the log query page and determining whether the operation instruction contains a keyword, the log query method further includes:
若确定所述操作指令中不包含关键字,则在所述操作指令是翻页操作指令时,将所述翻页操作指令对应的页码作为第二查询维度;If it is determined that the operation instruction does not contain a keyword, when the operation instruction is a page turning operation instruction, the page number corresponding to the page turning operation instruction is used as the second query dimension;
通过所述预设数据接口获取所述第二查询维度对应的目标日志,根据所述预设数据接口反馈的目标日志更新所述日志查询页面。Obtain the target log corresponding to the second query dimension through the preset data interface, and update the log query page according to the target log fed back by the preset data interface.
在一实施例中,所述根据所述预设数据接口反馈的所述日志,生成包含所述日志的日志查询页面的步骤之后,所述日志查询方法还包括:In an embodiment, after the step of generating a log query page containing the log according to the log fed back by the preset data interface, the log query method further includes:
若确定预设时间段内没有接收到基于所述日志查询页面触发的操作指令,则获取当前登录用户的用户标识;If it is determined that the operation instruction triggered based on the log query page is not received within the preset time period, acquiring the user ID of the currently logged-in user;
获取所述用户标识对应的历史操作行为数据,根据所述历史操作行为数据确定操作指令,并执行所述操作指令。Acquire historical operation behavior data corresponding to the user identifier, determine an operation instruction according to the historical operation behavior data, and execute the operation instruction.
在一实施例中,所述接收到日志查询请求,获取所述日志查询请求对应的第一查询维度的步骤之前,所述日志查询方法还包括:In an embodiment, before the step of receiving the log query request and obtaining the first query dimension corresponding to the log query request, the log query method further includes:
接收到业务平台发送的异常提示,获取所述业务平台的平台标识作为第一查询维度,并基于所述第一查询维度触发日志查询请求。Receiving the abnormal prompt sent by the service platform, acquiring the platform identifier of the service platform as the first query dimension, and triggering a log query request based on the first query dimension.
此外,为实现上述目的,本申请还提供一种日志查询装置,所述日志查询装置包括:In addition, in order to achieve the above objective, this application also provides a log query device, the log query device including:
请求接收模块,配置为接收到日志查询请求后,获取所述日志查询请求对应的第一查询维度;The request receiving module is configured to obtain the first query dimension corresponding to the log query request after receiving the log query request;
查询获取模块,配置为调用预设数据接口查询预设的日志数据库,通过所述预设数据接口获取所述第一查询维度对应的日志;The query and acquisition module is configured to call a preset data interface to query a preset log database, and obtain the log corresponding to the first query dimension through the preset data interface;
接收生成模块,配置为根据所述预设数据接口反馈的所述日志,生成包含所述日志的日志查询页面;A receiving and generating module configured to generate a log query page containing the log according to the log fed back by the preset data interface;
第一执行模块,配置为接收基于所述日志查询页面触发的操作指令,执行所述操作指令,以完成日志查询操作The first execution module is configured to receive an operation instruction triggered based on the log query page, and execute the operation instruction to complete the log query operation
此外,为实现上述目的,本申请还提供一种日志查询设备,所述日志查询设备包括:存储器、处理器及存储在所述存储器上并可在所述处理器上运行的日志查询程序,所述日志查询程序被所述处理器执行时实现如上所述的日志查询方法的步骤。In addition, in order to achieve the above object, the present application also provides a log query device, the log query device includes: a memory, a processor, and a log query program stored on the memory and running on the processor, so When the log query program is executed by the processor, the steps of the log query method described above are implemented.
此外,为实现上述目的,本申请还提供一种计算机可读存储介质,所述计算机可读存储介质上存储有日志查询程序,所述日志查询程序被处理器执行时实现如上所述的日志查询方法的步骤。In addition, in order to achieve the above object, the present application also provides a computer-readable storage medium having a log query program stored on the computer-readable storage medium, and when the log query program is executed by a processor, the log query as described above is realized. Method steps.
本申请提供一种日志查询方法、装置、设备及计算机可读存储介质。本申请实施例中日志查询设备通过调用预设数据接口查询日志数据库,预设数据接口获取各个业务平台的日志并发送至日志查询设备,日志查询设备接收各个业务平台的日志并生成包含日志的日志查询页面,使得运维人员可以基于日志查询页面进行日志查询操作,提高了日志查询的操作便捷性,以进一步地提高日志查询效率。This application provides a log query method, device, equipment, and computer-readable storage medium. In the embodiment of this application, the log query device queries the log database by calling the preset data interface. The preset data interface obtains the logs of each business platform and sends them to the log query device. The log query device receives the logs of each business platform and generates logs containing the logs. The query page allows operation and maintenance personnel to perform log query operations based on the log query page, which improves the operational convenience of log query and further improves log query efficiency.
附图说明Description of the drawings
图1是本申请实施例方案涉及的硬件运行环境的设备结构示意图;FIG. 1 is a schematic diagram of a device structure of a hardware operating environment involved in a solution of an embodiment of the present application;
图2为本申请日志查询方法第一实施例的流程示意图;2 is a schematic flowchart of the first embodiment of the application log query method;
图3为本申请日志查询方法第三实施例的流程示意图;FIG. 3 is a schematic flowchart of a third embodiment of an application log query method;
图4为本申请日志查询方法第四实施例的流程示意图;4 is a schematic flowchart of a fourth embodiment of an application log query method;
图5为本申请日志查询装置一实施例的功能模块示意图。Fig. 5 is a schematic diagram of functional modules of an embodiment of the log query device of the application.
本申请目的的实现、功能特点及优点将结合实施例,参照附图做进一步说明。The realization, functional characteristics, and advantages of the purpose of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings.
本发明的实施方式Embodiments of the present invention
应当理解,此处所描述的具体实施例仅仅用以解释本申请,并不用于限定本申请。It should be understood that the specific embodiments described here are only used to explain the application, and not used to limit the application.
如图1所示,图1是本申请实施例方案涉及的硬件运行环境的设备结构示意图。As shown in FIG. 1, FIG. 1 is a schematic diagram of the device structure of the hardware operating environment involved in the solution of the embodiment of the present application.
本申请实施例日志查询设备可以是PC机或服务器。The log query device in the embodiment of the present application may be a PC or a server.
如图1所示,该日志查询设备可以包括:处理器1001,例如CPU,网络接口1004,用户接口1003,存储器1005,通信总线1002。其中,通信总线1002配置为实现这些组件之间的连接通信。用户接口1003可以包括显示屏(Display)、输入单元比如键盘(Keyboard),可选用户接口1003还可以包括标准的有线接口、无线接口。网络接口1004可选的可以包括标准的有线接口、无线接口(如WI-FI接口)。存储器1005可以是高速RAM存储器,也可以是稳定的存储器(non-volatile memory),例如磁盘存储器。存储器1005可选的还可以是独立于前述处理器1001的存储装置。As shown in FIG. 1, the log query device may include: a processor 1001, such as a CPU, a network interface 1004, a user interface 1003, a memory 1005, and a communication bus 1002. Among them, the communication bus 1002 is configured to implement connection and communication between these components. The user interface 1003 may include a display screen (Display) and an input unit such as a keyboard (Keyboard), and the optional user interface 1003 may also include a standard wired interface and a wireless interface. The network interface 1004 may optionally include a standard wired interface and a wireless interface (such as a WI-FI interface). The memory 1005 may be a high-speed RAM memory, or a stable memory (non-volatile memory), such as a magnetic disk memory. Optionally, the memory 1005 may also be a storage device independent of the aforementioned processor 1001.
本领域技术人员可以理解,图1中示出的设备结构并不构成对设备的限定,可以包括比图示更多或更少的部件,或者组合某些部件,或者不同的部件布置。Those skilled in the art can understand that the structure of the device shown in FIG. 1 does not constitute a limitation on the device, and may include more or fewer components than those shown in the figure, or a combination of certain components, or different component arrangements.
如图1所示,作为一种计算机存储介质的存储器1005中可以包括操作系统、网络通信模块、用户接口模块以及日志查询程序。As shown in FIG. 1, a memory 1005 as a computer storage medium may include an operating system, a network communication module, a user interface module, and a log query program.
在图1所示的设备中,网络接口1004主要配置为连接后台服务器,与后台服务器进行数据通信;用户接口1003主要配置为连接客户端(用户端),与客户端进行数据通信;而处理器1001可以配置为调用存储器1005中存储的日志查询程序,并执行下述日志查询方法中的操作,在所述处理器上运行的日志查询程序被执行时所实现的方法可参照本申请日志查询方法各个实施例,此处不再赘述。In the device shown in Figure 1, the network interface 1004 is mainly configured to connect to the back-end server and communicate with the back-end server; the user interface 1003 is mainly configured to connect to the client (user side) and communicate with the client; and the processor 1001 can be configured to call the log query program stored in the memory 1005 and perform the operations in the following log query method. The method implemented when the log query program running on the processor is executed can refer to the log query method of this application. The various embodiments will not be repeated here.
当前应用程序部署在多台Linux服务器上,运维人员要搜索某个应用程序某个特定关键字的日志,通常采用的日志搜索方法包括:1、运维人员逐台登录Linux服务器,跳转到对应的日志目录,并采用Linux原生命令如less、vim等命令打开日志文件,并输入关键字进行日志关键字搜索;2、运维人员编写Shell或者Python脚本,通过指定堡垒机模拟登陆多台应用服务器,同时手写Linux的查询关键字日志命令如grep命令等,将匹配到的关键字日志回传到指定堡垒机,并向页面展示grep到的日志内容;3、运维人员借助开源的ELK套件,将采集到的应用日志写入Elastic Search的日志,依靠Kibana提供的日志搜索界面进行条件搜索。The current application is deployed on multiple Linux servers, and the operation and maintenance personnel need to search the logs of a specific keyword of a certain application. The log search methods usually used include: 1. The operation and maintenance personnel log in to the Linux server one by one and jump to Corresponding log directory, and use Linux native commands such as less, vim and other commands to open the log file, and enter keywords to search for log keywords; 2. The operation and maintenance personnel write Shell or Python scripts, and log in to multiple applications through the designated bastion machine. Server, at the same time handwriting Linux query keyword log commands such as grep command, etc., return the matched keyword logs to the designated bastion machine, and display the log content obtained by grep to the page; 3. Operation and maintenance personnel use the open source ELK suite , Write the collected application logs to Elastic Search logs rely on the log search interface provided by Kibana for conditional searches.
当前的日志搜索方式都存在不足之处,即,1、运维人员登陆多台Linux服务器并搜索日志显然操作效率很低,不利于快速定位问题;2、运维人员依赖Shell或者Python脚本来自动登陆多个服务器搜索脚本,则需要运维人员每次编辑搜索命令,搜索的门槛较高且容易出错,而且每次都需要登陆多台应用机器,如果遇到多人同时搜索的场景,对应用服务器的压力也会越大;3、运维人员借助ELK的Kibana的日志界面搜索虽可以看到搜索结果,但是搜索的维度有限,只能搜索包含关键字对应的日志,无法进一步搜索,也无法看到搜索结果之外的日志。The current log search methods all have shortcomings, namely, 1. The operation and maintenance personnel log in to multiple Linux servers and search the logs, obviously, the operation efficiency is very low, which is not conducive to quickly locating the problem; 2. The operation and maintenance personnel rely on Shell or Python scripts to automatically Logging in to multiple servers to search for scripts requires the operation and maintenance personnel to edit the search commands each time. The search threshold is high and error-prone, and it is necessary to log in to multiple application machines each time. If you encounter a scenario where multiple people search at the same time, the application The pressure on the server will also be greater; 3. Although the operation and maintenance personnel can see the search results with the help of ELK's Kibana log interface search, the search dimensions are limited, and they can only search for logs containing keywords, and cannot search further or cannot See logs outside of search results.
基于上述硬件结构,提出本申请日志查询方法实施例。Based on the above hardware structure, an embodiment of the log query method of this application is proposed.
本申请日志查询方法的第一实施例,包括:The first embodiment of the log query method of this application includes:
接收到日志查询请求,获取所述日志查询请求对应的第一查询维度;After receiving the log query request, obtain the first query dimension corresponding to the log query request;
调用预设数据接口查询预设的日志数据库,通过所述预设数据接口获取所述第一查询维度对应的日志;Call a preset data interface to query a preset log database, and obtain a log corresponding to the first query dimension through the preset data interface;
根据所述预设数据接口反馈的所述日志,生成包含所述日志的日志查询页面;Generating a log query page containing the log according to the log fed back by the preset data interface;
接收基于所述日志查询页面触发的操作指令,执行所述操作指令,以完成日志查询操作。An operation instruction triggered based on the log query page is received, and the operation instruction is executed to complete the log query operation.
本实施例中的日志查询设备可选安装Elastic Search,Elastic Search是一个基于Lucene的分布式、高扩展、高实时的搜索与数据分析引擎,Elastic Search基于RESTful web接口实现(Elastic Search的实现步骤包括:将数据提交到Elastic Search数据库中;再通过分词控制器去将对应的语句分词,将其权重和分词结果一并存入数据;当用户搜索数据时候,再根据权重将结果排名,打分,再将结果返回呈现给用户)。The log query device in this embodiment can optionally install Elastic Search, Elastic Search is a distributed, high-scalable, high-real-time search and data analysis engine based on Lucene. Elastic Search is implemented based on a RESTful web interface (the implementation steps of Elastic Search include: submit data to Elastic Search database; then use the word segmentation controller to segment the corresponding sentence, and store its weight and segmentation results into the data; when the user searches for the data, the results are ranked and scored according to the weight, and then the results are returned to the user ).
本申请实施例中,基于Elastic Search对业务平台产生的日志进行搜索,具体地,Elastic Search采集各个业务平台的日志信息,并将采集到的日志存储到Elastic Search的分布式集群中,然后,Elastic Search对采集到的日志进行分析处理,具体包括,对日志进行分词处理,增加权重等操作,提取日志中的特征信息,Elastic Search在接收到运维人员发送的搜索指令时,Elastic Search获取搜索指令中的关键字,并将关键字与各个日志的特征信息进行比对,输出日志搜索结果。In this embodiment of the application, the logs generated by the business platform are searched based on Elastic Search. Specifically, Elastic Search collects the log information of each business platform and stores the collected logs in the distributed cluster of Elastic Search. Then, Elastic Search Search analyzes and processes the collected logs, specifically including word segmentation processing on the logs, adding weights and other operations, and extracting feature information in the logs. When Elastic Search receives the search instructions sent by the operation and maintenance personnel, Elastic Search obtains the search instructions And compare the keywords with the characteristic information of each log, and output the log search results.
Elastic Search应用到日志搜索过程中可以有效地提高日志查询的效率,但是,现有的搜索过程,若Elastic Search反馈的搜索结果不准确,用户只能更换关键字进行多次搜索,若用户需要针对Elastic Search查看搜索结果之外的其他日志,则用户需要重新登录这个业务平台的其他页面或者登录其他平台进行查询,这样的操作较为复杂。The application of Elastic Search to the log search process can effectively improve the efficiency of log query. However, in the existing search process, if the search results returned by Elastic Search are inaccurate, the user can only perform multiple searches by changing keywords. For Elastic Search to view logs other than the search results, the user needs to log in to other pages of this business platform or log in to other platforms to query, which is more complicated.
例如,业务平台A、业务平台B和业务平台C为相互关联的业务平台,在业务平台A异常报警时,用户若想在Elastic Search的接口输入“error”,以对业务平台A、业务平台B和业务平台C对应的日志进行搜索,得到包含“error”的日志也只是业务平台A产生的日志,查询不到业务平台B和业务平台C的数据,若用户需要查询业务平台B和业务平台C对应的日志,以判断业务平台B和业务平台C是否受到影响,则用户需要登录业务平台B和业务平台C,输入对应的查询指令,才可以进行追溯查询,这样的用户操作较为复杂。For example, business platform A, business platform B, and business platform C are interrelated business platforms. When business platform A alarms abnormally, if the user wants to enter "error" in the interface of Elastic Search, it can be used to correct business platform A and business platform B. Search the log corresponding to business platform C, and the log containing "error" is only the log generated by business platform A, and the data of business platform B and business platform C cannot be queried. If the user needs to query business platform B and business platform C Corresponding logs are used to determine whether business platform B and business platform C are affected. The user needs to log in to business platform B and business platform C and input corresponding query instructions to perform retrospective query. Such user operations are more complicated.
本申请实施例是针对上述情况作出的改进,本实施例中的日志查询方法应用于日志查询设备,日志查询设备与Elastic Search的集群通信连接,Elastic Search的集群通过接口与多个业务平台通信连接,因此,日志查询设备可以查询多个业务平台(业务子系统)的日志,在日志查询操作之前,日志查询设备预先进行日志采集操作,具体地,包括:The embodiment of this application is an improvement made in response to the above situation. The log query method in this embodiment is applied to a log query device. The log query device is in communication connection with the Elastic Search cluster, and the Elastic Search cluster communicates with multiple service platforms through interfaces. Therefore, the log query device can query the logs of multiple business platforms (business subsystems). Before the log query operation, the log query device performs log collection operations in advance, specifically including:
接收到日志采集指令,调用预设采集接口采集业务平台产生的日志,并获取所述日志的属性,将所述日志与所述属性关联保存至预设的日志数据库。After receiving the log collection instruction, call the preset collection interface to collect the logs generated by the business platform, obtain the attributes of the logs, and associate the logs with the attributes and save them to a preset log database.
即,日志查询设备接收日志采集指令,日志采集指令的触发方式不作具体限定,日志查询设备在接收到日志采集指令时,日志查询设备调用预设采集接口(预设采集接口可以是预先设置的Elastic Search日志采集接口,还可以是运维人员重新开发的接口)采集业务平台产生的日志,并获取各个日志的属性,其中,属性包括采集时间、业务平台标识(业务平台标识为唯一业务平台的标识信息,例如,业务平台名称,或者业务平台编号)、日志来源IP地址和日志标识;日志查询设备将日志与日志对应的属性关联保存至预设的日志数据库,预设的日志数据库是指预先设置的保存日志信息的数据库,预设的日志数据库可以设置于分布式集群中。That is, the log query device receives the log collection instruction, and the trigger method of the log collection instruction is not specifically limited. When the log query device receives the log collection instruction, the log query device calls the preset collection interface (the preset collection interface can be a preset Elastic Search log collection interface, which can also be an interface re-developed by operation and maintenance personnel) Collect logs generated by the business platform and obtain the attributes of each log. The attributes include the collection time and the business platform identifier (the business platform identifier is the identifier of the unique business platform) Information, such as business platform name or business platform number), log source IP address, and log identifier; the log query device associates the log with the attributes corresponding to the log and saves it to the preset log database. The preset log database refers to the preset log database. The database for storing log information, the preset log database can be set in a distributed cluster.
本实施例中,日志查询设备通过调用预设采集接口采集各个业务平台的日志,并将日志与日志对应的属性关联保存至预设的日志数据库,日志查询设备在接收到日志查询请求时,查询预设的日志数据库,获取到不同业务平台的日志,使得用户不需要用户登录多个业务平台,具体地:In this embodiment, the log query device collects the logs of each service platform by calling the preset collection interface, and associates the log with the attributes corresponding to the log and saves it to the preset log database. When the log query device receives the log query request, it queries The preset log database obtains logs of different business platforms, so that users do not need users to log in to multiple business platforms, specifically:
参照图2,图2为本申请日志查询方法第一实施例的流程示意图,所述日志查询方法包括:Referring to FIG. 2, FIG. 2 is a schematic flowchart of a first embodiment of a log query method of this application, and the log query method includes:
步骤S10,接收到日志查询请求,获取所述日志查询请求对应的第一查询维度。Step S10: A log query request is received, and a first query dimension corresponding to the log query request is obtained.
本实施例中日志查询设备接收日志查询请求,日志查询请求的触发方式不作具体限定,即,日志查询请求可以用户主动触发的,例如,用户在日志查询设备对应的显示界面上输入查询xxx业务平台的日志,触发日志查询请求;此外,日志查询请求还可以是日志查询设备自动触发的,例如,日志查询设备中预设日志查询条件:每天凌晨自动进行日志查询,日志查询设备在到达凌晨时,自动触发日志查询请求。In this embodiment, the log query device receives the log query request, and the trigger method of the log query request is not specifically limited, that is, the log query request can be triggered by the user actively, for example, the user enters the query xxx service platform on the display interface corresponding to the log query device In addition, the log query request can also be automatically triggered by the log query device. For example, the log query condition is preset in the log query device: the log query is automatically performed in the early morning of every day, and the log query device arrives in the early morning. The log query request is triggered automatically.
日志查询设备接收到日志查询请求时,日志查询设备获取日志查询请求对应的第一查询维度,第一查询维度可以是日志采集的时间维度,日志存放的空间维度、日志产生的空间维度等等。When the log query device receives the log query request, the log query device obtains the first query dimension corresponding to the log query request. The first query dimension may be the time dimension of log collection, the spatial dimension of log storage, the spatial dimension of log generation, and so on.
步骤S20,调用预设数据接口查询预设的日志数据库,通过所述预设数据接口获取所述第一查询维度对应的日志。Step S20: Invoke a preset data interface to query a preset log database, and obtain a log corresponding to the first query dimension through the preset data interface.
日志查询设备调用预设数据接口(预设数据接口是指预先设置的用户查询各个业务平台日志的数据接口,例如,预设数据接口可以理解为Elastic Search的集群对应的数据接口)查询预设的日志数据库,具体地,预设数据接口关联有数据分析脚本,预设数据接口通过运行数据分析脚本,获取预设的日志数据库中第一查询维度对应的日志。The log query device calls the preset data interface (the preset data interface refers to the preset data interface for users to query the logs of each business platform, for example, the preset data interface can be understood as the data interface corresponding to the Elastic Search cluster) to query the preset The log database, specifically, the preset data interface is associated with a data analysis script, and the preset data interface obtains the log corresponding to the first query dimension in the preset log database by running the data analysis script.
例如,第一查询维度为xxx业务平台产生的日志,业务查询设备调用预设数据接口查询预设的日志数据库,获取日志数据库中xxx业务平台产生的日志;再比如,第一查询维度为2019年9月10日,业务查询设备调用预设数据接口查询预设的日志数据库,获取日志数据库中2019年9月10日采集的日志。For example, the first query dimension is the log generated by the xxx business platform, and the business query device calls the preset data interface to query the preset log database to obtain the logs generated by the xxx business platform in the log database; for another example, the first query dimension is 2019 On September 10, the business query device called the preset data interface to query the preset log database, and obtained the logs collected on September 10, 2019 in the log database.
预设数据接口将第一查询维度对应的日志反馈至日志查询设备,使得日志查询设备处理日志,具体地:The preset data interface feeds back the log corresponding to the first query dimension to the log query device, so that the log query device processes the log, specifically:
步骤S30,根据所述预设数据接口反馈的所述日志,生成包含所述日志的日志查询页面。Step S30: Generate a log query page containing the log according to the log fed back by the preset data interface.
日志查询设备接收预设数据接口反馈的日志,日志查询设备对日志进行排版,生成包含日志的日志查询页面。The log query device receives the log fed back by the preset data interface, and the log query device types out the log to generate a log query page containing the log.
本实施例中给出了一种日志查询设备对日志进行排版,生成日志查询页面的具体实现方式,具体地,包括:In this embodiment, a specific implementation method for the log query device to typeset the log and generate the log query page is given, specifically including:
步骤a1,接收到显示配置请求,输出显示配置提示,以提示用户配置日志查询页面的显示配置信息;Step a1, receiving a display configuration request, and outputting a display configuration prompt to prompt the user to configure the display configuration information of the log query page;
步骤a2,获取基于所述显示配置提示输入的显示配置信息。Step a2: Obtain display configuration information input based on the display configuration prompt.
本实施例中日志查询设备中预先设置显示配置信息,显示配置信息可以理解为日志查询页面的格式信息,即,日志查询设备接收显示配置请求,显示配置请求的触发方式不作具体限定,日志查询设备接收到显示配置请求时,日志查询设备输出显示配置提示,以提示用户配置日志查询页面的显示配置信息,例如,用户可以基于显示配置提示设置:排版格式为每页10个日志,日志查询设备获取基于显示配置提示输入的显示配置信息。In this embodiment, the log query device is preset to display configuration information. The display configuration information can be understood as the format information of the log query page. That is, the log query device receives the display configuration request, and the trigger mode of the display configuration request is not specifically limited. The log query device When receiving a display configuration request, the log query device outputs a display configuration prompt to prompt the user to configure the display configuration information of the log query page. For example, the user can set the display configuration prompt based on the display configuration prompt: the formatting format is 10 logs per page, and the log query device obtains Display configuration information entered based on the display configuration prompt.
日志查询设备基于设置的显示配置信息,生成日志查询页面,具体地,包括:The log query device generates a log query page based on the set display configuration information, specifically, including:
步骤b1,根据所述显示配置信息中的显示格式生成显示模板,将所述预设数据接口反馈的所述日志添加到所述显示模板中得到日志列表;Step b1, generating a display template according to the display format in the display configuration information, and adding the log fed back by the preset data interface to the display template to obtain a log list;
步骤b2,在所述日志列表预设区域添加功能组件,生成包含所述日志的日志查询页面。Step b2: Add a functional component to the preset area of the log list to generate a log query page containing the log.
日志查询设备接收Elastic Search数据接口反馈的日志,日志查询设备获取显示配置信息中的显示格式,并根据显示格式生成显示模板;例如,显示格式为n行2列,则日志查询设备生成一个n行2列的显示模板,日志查询设备将采集到的第一查询维度对应的日志有300条,则日志查询设备将300条日志依次输入至显示模板的第一列,日志的属性输入至显示模板的第二列中得到日志列表,在日志列表边沿区域添加功能组件(功能组件包括但不仅限于翻页组件、滚动组件、跳转组件和搜索组件等等),生成包含日志的日志查询页面。The log query device receives the log feedback from the Elastic Search data interface. The log query device obtains the display format in the display configuration information, and generates a display template according to the display format; for example, if the display format is n rows and 2 columns, the log query device generates one n rows Two-column display template. The log query device will collect 300 logs corresponding to the first query dimension, and the log query device will input 300 logs into the first column of the display template in turn, and enter the attributes of the logs into the display template. The log list is obtained in the second column, and functional components are added to the edge area of the log list (function components include but not limited to page turning component, scrolling component, jump component, search component, etc.) to generate a log query page containing logs.
进一步的,为了提高生成日志查询页面的灵活性,所述日志查询设备基于设置的显示配置信息,生成日志查询页面还可包括:Further, in order to improve the flexibility of generating the log query page, the log query device based on the set display configuration information, generating the log query page may also include:
根据所述显示配置信息中的显示格式生成显示模板,按所述显示模板中的显示维度将所述预设数据接口反馈的所述日志进行划分,形成日志子集合;Generate a display template according to the display format in the display configuration information, and divide the logs fed back by the preset data interface according to the display dimensions in the display template to form a log subset;
将各所述日志子集合依次填充至所述显示模板中得到日志列表;Filling each of the log sub-sets into the display template in order to obtain a log list;
在所述日志列表预设区域添加功能组件,生成包含所述日志的日志查询页面。A functional component is added to the preset area of the log list to generate a log query page containing the log.
其中,日志显示维度包括但不限于:日志对应的系统类型、日志来源IP等等,然后结合显示维度以及显示模板进行日志显示,提高日志显示的灵活性,也提高后续日志查询的灵活性、准确性和查询效率。Among them, the log display dimensions include but are not limited to: the system type corresponding to the log, the log source IP, etc., and then combine the display dimensions and the display template to display the log, which improves the flexibility of log display and the flexibility and accuracy of subsequent log queries. Sex and query efficiency.
步骤S40,接收基于所述日志查询页面触发的操作指令,执行所述操作指令,以完成日志查询操作。Step S40: Receive an operation instruction triggered based on the log query page, and execute the operation instruction to complete the log query operation.
日志查询设备接收基于日志查询页面触发的操作指令,即,日志查询页面中同时提供快捷键功能,包含向下翻页、向上翻页、跳到日志最前、跳到日志最后、搜索下一个关键字等功能组件,运维人员可以基于日志查询页面中的功能组件触发操作请求,日志查询设备接收基于日志查询页面触发的操作指令,执行操作指令,以完成日志查询操作。该日志查询页面触发的操作指令可以是在日志页面中触发,实现页面的日志切换查询。此外,还可以在选中其中一条日志之后触发,这种情况下,进行切换操作时,是对该选中专利的向上查询、向下查询,从而实现该日志具体情况的追溯。The log query device receives operation instructions triggered based on the log query page, that is, the log query page also provides shortcut key functions, including page down, page up, jump to the front of the log, jump to the end of the log, and search for the next keyword Operation and maintenance personnel can trigger operation requests based on the functional components in the log query page, and the log query device receives operation instructions triggered based on the log query page, and executes the operation instructions to complete the log query operation. The operation instruction triggered by the log query page may be triggered in the log page to realize the log switch query of the page. In addition, it can also be triggered after one of the logs is selected. In this case, when the switching operation is performed, the selected patent is inquired up and down, so as to realize the traceability of the specific situation of the log.
也就是说,日志查询设备基于操作指令实现日志的追溯,即,日志查询设备中根据操作指令实现从一条日志切换到该日志的上一层日志,下一层日志,或者同一业务层级的其他业务平台的日志中,例如,日志查询设备与业务平台A、业务平台B通信连接,业务平台A是业务平台B的上游业务系统,用户在日志查询页面中输入关键字:“error”,日志查询页面突出显示包含“error”的错误日志,该错误日志可能是业务平台A或者业务平台B产生的,用户通过快捷键从业务平台A的第一日志,跳转至业务平台B的第二日志。In other words, the log query device implements log traceability based on operation instructions, that is, the log query device implements switching from one log to the previous log of the log, the next log, or other services of the same business level according to the operation instruction. In the log of the platform, for example, the log query device communicates with business platform A and business platform B. Business platform A is the upstream business system of business platform B. The user enters the keyword: "error" in the log query page, and the log query page Highlight the error log containing "error". The error log may be generated by business platform A or business platform B. The user jumps from the first log of business platform A to the second log of business platform B through the shortcut key.
需要补充说明的是,除了在日志查询页面中提供功能组件,本申请实施例还可以提供符合运维人员常规搜索的快捷键,具体可以在日志查询页面的功能组件中,检测到鼠标光标悬浮到任一个功能组件但是没有点击时,输出提示各个快捷键对应功能的提示信息。例如,输出提示信息:Shift+F代表向新的日志翻页;Shift+B代表向老的日志翻页(通过上述两个功能即可实现日志的来回滚动查看);Shift+G代表跳到日志最前面;Shift+H代表跳到日志最后面(通过上述两个快捷键以及与向前向后翻页的配合,即可实现新老日志的快速浏览);Shift+N配合关键字功能组件的搜索功能,即可实现关键字搜索的逐个匹配跳转(运维人员即可搜索到每一个匹配到关键字日志以及日志上下文内容)。It needs to be added that, in addition to providing functional components on the log query page, the embodiment of the application can also provide shortcut keys that meet the routine search of operation and maintenance personnel. Specifically, it can be detected that the mouse cursor is hovering to the functional component on the log query page. When any functional component is not clicked, a prompt message prompting the corresponding function of each shortcut key is output. For example, output prompt information: Shift+F means to page to the new log; Shift+B means to page to the old log (the log can be scrolled back and forth through the above two functions); Shift+G means to jump to the log Foremost; Shift+H means to jump to the end of the log (through the above two shortcut keys and the cooperation with forward and backward pages, you can quickly browse the new and old logs); Shift+N cooperates with the keyword function component The search function can realize the keyword search for matching jumps one by one (the operation and maintenance personnel can search for each matching keyword log and log context content).
此外,为了提高日志查询的准确性和效率,日志查询页面中还支持其他的操作,例如,用户选中某一条日志之后,日志查询页面中会弹出悬浮小窗口,提示用户向左滑和向右滑可以上下翻页,以翻页到导致该日志原因的上一层日志(实现上一层日志原因的追溯)、单击跳到最前面(实现该日志的起始日志原因的追溯),双击跳到最后面(实现该日志的终止日志原因的预览)等等;再比如,用户选中日志查询页面的指定区域之后,日志查询页面会根据用户的操作指令(如滑动鼠标的滚动操作)进行局部缩放。In addition, in order to improve the accuracy and efficiency of log query, other operations are supported on the log query page. For example, after the user selects a log, a small floating window will pop up on the log query page, prompting the user to slide left and right You can turn the page up and down to turn to the previous log that caused the log (to trace the reason of the previous log), click to jump to the top (to trace the cause of the log's initial log), and double-click to skip To the end (to achieve a preview of the log termination reason for the log), etc.; for another example, after the user selects a specified area of the log query page, the log query page will be partially zoomed according to the user's operation instructions (such as scrolling by sliding the mouse) .
本实施例中日志查询设备通过调用预设数据接口查询日志数据库,预设数据接口获取各个业务平台的日志并发送至日志查询设备,日志查询设备接收各个业务平台的日志并生成包含日志的日志查询页面,使得运维人员可以基于日志查询页面进行日志查询操作,提高了日志查询的操作便捷性,以进一步地提高日志查询效率。In this embodiment, the log query device queries the log database by calling the preset data interface. The preset data interface obtains the logs of each business platform and sends them to the log query device. The log query device receives the logs of each business platform and generates a log query containing the logs. The page allows operation and maintenance personnel to perform log query operations based on the log query page, which improves the operational convenience of log query and further improves log query efficiency.
本实施例中的技术方案应用于金融领域,例如应用在银行机构的存款/贷款产品或者系统的日志查询页面中,基于Elastic Search的全文搜索能力,提供了一种符合运维人员日志搜索习惯的全文搜索功能,运维人员不用手动登录多台业务平台,不用输入搜索的各种命令,通过一个集中式的日志查询页面就能秒级搜索多台对应业务平台的日志,并查看日志的上下文,实现向下翻页、向上翻页、跳到日志最前、跳到日志最后、搜索下一个关键字等功能,使得用户操作更加便捷。The technical solution in this embodiment is applied to the financial field, for example, in the deposit/loan product of a banking institution or the log query page of the system. Based on the full-text search capability of Elastic Search, it provides a log search habit of operation and maintenance personnel With full-text search function, operation and maintenance personnel do not need to manually log in to multiple business platforms, and do not need to enter various search commands. Through a centralized log query page, they can search for multiple corresponding business platform logs in seconds, and view the context of the logs. Realize the functions of page down, page up, jump to the front of the log, jump to the end of the log, search for the next keyword, etc., making user operations more convenient.
进一步地,基于本申请日志查询方法第一实施例,提出本申请日志查询方法第二实施例。Further, based on the first embodiment of the log query method of the present application, a second embodiment of the log query method of the present application is proposed.
本实施例是第一实施例中步骤S10之前的步骤,本实施例中给出了一种触发日志查询请求的具体实现方式,包括:This embodiment is a step before step S10 in the first embodiment. In this embodiment, a specific implementation method for triggering a log query request is given, including:
接收到业务平台发送的异常提示,获取所述业务平台的平台标识作为第一查询维度,并基于所述第一查询维度触发日志查询请求。Receiving the abnormal prompt sent by the service platform, acquiring the platform identifier of the service platform as the first query dimension, and triggering a log query request based on the first query dimension.
本实施例中日志查询设备实时地监测各个业务平台,业务平台出现异常时,业务平台发送的异常提示至日志查询设备,日志查询设备检测到业务平台异常,日志查询设备在检测到业务平台异常时,日志查询设备获取业务平台的平台标识作为第一查询维度,日志查询设备基于第一查询维度触发日志查询请求。In this embodiment, the log query device monitors each service platform in real time. When the service platform is abnormal, the service platform sends an exception notification to the log query device, the log query device detects the business platform abnormality, and the log query device detects the business platform abnormality , The log query device obtains the platform identifier of the business platform as the first query dimension, and the log query device triggers the log query request based on the first query dimension.
本实施例中,日志查询设备通过检测各个业务平台的状态自动触发日志查询请求,使得日志查询操作更加便捷。In this embodiment, the log query device automatically triggers the log query request by detecting the status of each service platform, which makes the log query operation more convenient.
进一步地,参照图3,基于本申请日志查询方法第一实施例,提出本申请日志查询方法第三实施例。Further, referring to FIG. 3, based on the first embodiment of the log query method of the present application, a third embodiment of the log query method of the present application is proposed.
本实施例是第一实施例中步骤S40的细化,本实施例与第一实施例的区别在于:This embodiment is a refinement of step S40 in the first embodiment. The difference between this embodiment and the first embodiment lies in:
步骤S41,接收基于所述日志查询页面触发的操作指令,判断所述操作指令中是否包含关键字。Step S41: Receive an operation instruction triggered based on the log query page, and determine whether the operation instruction contains a keyword.
日志查询设备接收基于日志查询页面触发的操作指令,日志查询设备判断操作指令中是否包含关键字,例如,日志查询页面中设置关键字输入框,若用户在关键字输入框中输入的关键字,并点击日志查询页面的搜索组件,则操作指令中包含关键字;用户没有在关键字输入框中输入的关键字,而直接点击日志查询页面的跳转组件,则操作指令中没有包含关键字。The log query device receives the operation instruction triggered based on the log query page, and the log query device determines whether the operation instruction contains keywords. For example, a keyword input box is set on the log query page. If the user enters the keyword in the keyword input box, And click the search component of the log query page, the operation instruction contains keywords; the user does not enter the keyword in the keyword input box, but directly clicks the jump component of the log query page, the operation instruction does not contain the keyword.
步骤S42,若确定所述操作指令中包含关键字,则通过所述预设数据接口查询所述日志,得到包含所述关键字的目标日志。Step S42: If it is determined that the operation instruction contains a keyword, query the log through the preset data interface to obtain a target log containing the keyword.
若操作指令中包含关键字,日志查询设备则通过预设数据接口查询第一查询维度对应的日志,得到包含关键字的目标日志,本实施例中日志查询设备借助预设数据接口查询第一查询维度对应的日志,得到包含关键字的目标日志,If the operation instruction contains a keyword, the log query device queries the log corresponding to the first query dimension through the preset data interface to obtain the target log containing the keyword. In this embodiment, the log query device queries the first query via the preset data interface The log corresponding to the dimension, get the target log containing the keyword,
可以理解的是,实质上的日志查询操作并不在日志查询设备上进行,日志查询设备是显示预设数据接口的查询操作过程,以方便用户查看,同时,日志查询设备可以将用户的操作指令发送至预设数据接口,使得预设数据接口按照用户的操作指令执行。It is understandable that the actual log query operation is not performed on the log query device. The log query device displays the query operation process of the preset data interface to facilitate the user to view. At the same time, the log query device can send the user's operation instructions To the preset data interface, the preset data interface is executed according to the user's operating instructions.
步骤S43,根据所述预设数据接口反馈的目标日志更新所述日志查询页面。Step S43: Update the log query page according to the target log fed back by the preset data interface.
日志查询设备接收预设数据接口反馈的目标日志,日志查询设备将日志查询页面上的日志更新为目标日志,本实施例中,日志查询设备根据用户的操作指令,更新日志查询页面,以便用户查看。The log query device receives the target log fed back by the preset data interface, and the log query device updates the log on the log query page to the target log. In this embodiment, the log query device updates the log query page according to the user's operation instruction for the user to view .
为了方便理解,以百度搜索引擎为例进行说明,用户在终端百度的数据搜索栏中输入关键字,百度搜索引擎按照关键字进行搜索,并将搜索结果发送至终端,这个过程中用户并不可以查看百度搜索引擎的数据源,用户只可以看到搜索结果。本实施例是基于此作出的改进,日志查询设备调用预设数据接口查询日志数据库,预设数据接口获取各个业务平台的日志并发送至日志查询设备,日志查询设备获取各个业务平台的日志,日志查询设备将各个业务平台的日志作为数据源,模拟预设的查询操作,即,预设的数据接口将目标日志发送至日志查询设备,日志查询设备接收预设数据接口反馈的目标日志,并将日志查询页面上的日志更新为目标日志。In order to facilitate understanding, take the Baidu search engine as an example. The user enters keywords in the data search bar of the terminal Baidu. The Baidu search engine searches according to the keywords and sends the search results to the terminal. In this process, the user cannot View the data source of Baidu search engine, users can only see the search results. This embodiment is an improvement based on this. The log query device calls the preset data interface to query the log database. The preset data interface obtains the logs of each business platform and sends them to the log query device. The log query device obtains the logs of each business platform. The query device uses the logs of each business platform as the data source to simulate the preset query operation, that is, the preset data interface sends the target log to the log query device, and the log query device receives the target log fed back by the preset data interface, and The log on the log query page is updated to the target log.
进一步地,参照图4,基于本申请日志查询方法上述实施例,提出本申请日志查询方法第四实施例。Further, referring to FIG. 4, based on the foregoing embodiment of the log query method of the present application, a fourth embodiment of the log query method of the present application is proposed.
本实施例是第一实施例中步骤S40的细化,本实施例是第三实施例中步骤S41之后的步骤,本实施例与上述实施例的区别在于:This embodiment is a refinement of step S40 in the first embodiment. This embodiment is a step after step S41 in the third embodiment. The difference between this embodiment and the above-mentioned embodiment lies in:
步骤S44,若确定所述操作指令中不包含关键字,则在所述操作指令是翻页操作指令时,将所述翻页操作指令对应的页码作为第二查询维度。Step S44: If it is determined that the operation instruction does not contain a keyword, when the operation instruction is a page turning operation instruction, the page number corresponding to the page turning operation instruction is used as the second query dimension.
若操作指令中不包含关键字,日志查询设备判断操作指令是否为翻页操作指令,操作指令不是翻页操作指令时,日志查询设备确定操作指令类型,根据操作指令类型确定第二查询维度,例如,用户可以点击日志查询页面中的xxxIP地址,日志查询设备将xxxIP地址作为第二查询维度。If the operation instruction does not contain a keyword, the log query device determines whether the operation instruction is a page turning operation instruction. When the operation instruction is not a page turning operation instruction, the log query device determines the operation instruction type, and determines the second query dimension according to the operation instruction type, for example , The user can click the xxxIP address on the log query page, and the log query device will use the xxxIP address as the second query dimension.
在操作指令是翻页操作指令时,日志查询设备获取翻页操作指令对应的页码,并将页面作为第二查询维度,例如,用户可以点击日志查询页面中的跳转下一页,日志查询设备将下一页的日志范围作为第二查询维度。其中,翻页操作指令的触发方式不作具体限定,即,翻页操作指令可以是用户按压快捷键、组合键或者是在页面的悬浮小窗口输入预设操作时触发的。When the operation instruction is a page turning operation instruction, the log query device obtains the page number corresponding to the page turning operation instruction, and uses the page as the second query dimension. For example, the user can click on the log query page to jump to the next page, and the log query device Use the log range on the next page as the second query dimension. The triggering method of the page turning operation instruction is not specifically limited, that is, the page turning operation instruction may be triggered when the user presses a shortcut key, a combination key, or inputs a preset operation in a floating window on the page.
步骤S45,通过所述预设数据接口获取所述第二查询维度对应的目标日志,根据所述预设数据接口反馈的目标日志更新所述日志查询页面。Step S45: Obtain the target log corresponding to the second query dimension through the preset data interface, and update the log query page according to the target log fed back by the preset data interface.
日志查询设备通过预设数据接口查询日志,确定第二查询维度对应的目标日志,预设数据接口将目标日志发送至日志查询设备,日志查询设备接收目标日志,日志查询设备将日志查询页面中的日志更新为目标日志,即,例如当前日志查询页面中的日志为第1项到第10项,用户在日志查询页面中点击:“跳到日志最后”,则预设数据接口查询日志确定最后的目标日志,预设数据接口将最后的目标日志发送至日志查询设备,日志查询设备接收预设数据接口反馈的目标日志,并将日志查询页面中的日志更新为目标日志。The log query device queries the logs through the preset data interface to determine the target log corresponding to the second query dimension. The preset data interface sends the target log to the log query device, the log query device receives the target log, and the log query device will The log is updated as the target log, that is, for example, the log in the current log query page is item 1 to item 10, and the user clicks on the log query page: "Skip to the end of the log", the preset data interface query log determines the last Target log, the preset data interface sends the final target log to the log query device, and the log query device receives the target log fed back by the preset data interface, and updates the log in the log query page to the target log.
本实施例中支持多种触发操作指令的方式,使得用户操作更加便捷,此外,日志查询设备通过操作指令确定第二查询维度,来限制搜索范围,从而达到更快更精准的日志搜索。In this embodiment, multiple ways of triggering operation instructions are supported, which makes user operations more convenient. In addition, the log query device determines the second query dimension through the operation instructions to limit the search range, thereby achieving faster and more accurate log search.
进一步地,基于本申请日志查询方法上述实施例,提出本申请日志查询方法第五实施例。Further, based on the foregoing embodiments of the log query method of the present application, a fifth embodiment of the log query method of the present application is proposed.
本实施例是第一实施例中步骤S30之后的步骤,本实施例与第一实施例的区别在于:This embodiment is a step after step S30 in the first embodiment. The difference between this embodiment and the first embodiment lies in:
若确定预设时间段内没有接收到基于所述日志查询页面触发的操作指令,则获取当前登录用户的用户标识。If it is determined that the operation instruction triggered based on the log query page is not received within the preset time period, the user identification of the currently logged-in user is acquired.
获取所述用户标识对应的历史操作行为数据,根据所述历史操作行为数据确定操作指令,并执行所述操作指令。Acquire historical operation behavior data corresponding to the user identifier, determine an operation instruction according to the historical operation behavior data, and execute the operation instruction.
若预设时间段内没有接收到基于日志查询页面触发的操作指令,日志查询设备则获取当前登录用户的用户标识(用户标识是指唯一识别登录用户的标识信息,例如,用户账户信息)。If the operation instruction triggered based on the log query page is not received within the preset time period, the log query device obtains the user ID of the currently logged-in user (user ID refers to the identification information that uniquely identifies the logged-in user, such as user account information).
日志查询设备获取用户标识对应的历史操作行为数据,历史操作行为数据包括用户浏览时间,浏览频率等等;日志查询设备根据历史操作行为数据确定操作指令,并执行操作指令。The log query device obtains the historical operation behavior data corresponding to the user identification. The historical operation behavior data includes user browsing time, browsing frequency, etc.; the log query device determines the operation instruction according to the historical operation behavior data, and executes the operation instruction.
日志查询设备根据历史操作行为数据确定操作指令可以通过不同的方式实现:方式一:日志查询设备将历史操作行为数据中频率最高的历史操作指令作为操作指令;方式二:日志查询设备根据历史操作行为数据中各个历史操作指令的触发时间,确定操作指令,例如,当前时间为15点,历史操作行为数据中14点到16点用户通常查询业务平台A的日志,日志查询设备触发业务平台A日志查询的操作指令。The log query device determines the operation instruction based on the historical operation behavior data can be implemented in different ways: Method 1: The log query device uses the most frequent historical operation instruction in the historical operation behavior data as the operation instruction; Method 2: The log query device uses the historical operation behavior Determine the trigger time of each historical operation instruction in the data, and determine the operation instruction. For example, the current time is 15:00, and the historical operation behavior data is from 14:00 to 16:00. Users usually query the log of business platform A, and the log query device triggers the log query of business platform A. Operation instructions.
本实施例中日志查询设备根据用户的历史操作行为数据,自动触发操作指令,可以有效地减少用户的操作,提高日志查询效率。In this embodiment, the log query device automatically triggers operation instructions according to the user's historical operation behavior data, which can effectively reduce user operations and improve log query efficiency.
参考图5,本申请实施例还提供一种日志查询装置,所述日志查询装置包括:Referring to FIG. 5, an embodiment of the present application further provides a log query device, and the log query device includes:
请求接收模块10,配置为接收到日志查询请求后,获取所述日志查询请求对应的第一查询维度;The request receiving module 10 is configured to obtain the first query dimension corresponding to the log query request after receiving the log query request;
查询获取模块20,配置为调用预设数据接口查询预设的日志数据库,通过所述预设数据接口获取所述第一查询维度对应的日志;The query obtaining module 20 is configured to call a preset data interface to query a preset log database, and obtain the log corresponding to the first query dimension through the preset data interface;
接收生成模块30,配置为根据所述预设数据接口反馈的所述日志,生成包含所述日志的日志查询页面;Receiving and generating module 30, configured to generate a log query page containing the log according to the log fed back by the preset data interface;
第一执行模块40,配置为接收基于所述日志查询页面触发的操作指令,执行所述操作指令,以完成日志查询操作。The first execution module 40 is configured to receive an operation instruction triggered based on the log query page, and execute the operation instruction to complete the log query operation.
在一实施例中,所述日志查询装置,包括:In an embodiment, the log query device includes:
日志采集模块,配置为接收到日志采集指令后,调用预设采集接口采集业务平台产生的日志,并获取所述日志的属性,其中,所述属性包括采集时间、业务平台标识、日志来源IP地址和日志标识;The log collection module is configured to, after receiving the log collection instruction, call the preset collection interface to collect logs generated by the service platform, and obtain attributes of the logs, where the attributes include collection time, service platform identification, and log source IP address And log identification;
关联存储模块,配置为将所述日志与所述属性关联保存至预设的日志数据库。The associated storage module is configured to associate and save the log and the attribute to a preset log database.
在一实施例中,所述日志查询装置,包括:In an embodiment, the log query device includes:
接收输出模块,配置为接收到显示配置请求后,输出显示配置提示,以提示用户配置日志查询页面的显示配置信息;The receiving output module is configured to output a display configuration prompt after receiving a display configuration request to prompt the user to configure the display configuration information of the log query page;
配置获取模块,配置为获取基于所述显示配置提示输入的显示配置信息;A configuration obtaining module, configured to obtain display configuration information input based on the display configuration prompt;
所述接收生成模块30,包括:The receiving and generating module 30 includes:
第一生成单元,配置为根据所述显示配置信息中的显示格式生成显示模板,第二生成单元,配置为将所述预设数据接口反馈的所述日志添加到所述显示模板中得到日志列表,在所述日志列表预设区域添加功能组件,生成包含所述日志的日志查询页面。The first generating unit is configured to generate a display template according to the display format in the display configuration information, and the second generating unit is configured to add the log fed back by the preset data interface to the display template to obtain a log list , Adding a functional component to the preset area of the log list to generate a log query page containing the log.
在一实施例中,所述第一执行模块40,包括:In an embodiment, the first execution module 40 includes:
接收判断单元,配置为接收基于所述日志查询页面触发的操作指令,判断所述操作指令中是否包含关键字;A receiving judgment unit configured to receive an operation instruction triggered based on the log query page, and determine whether the operation instruction contains a keyword;
查询确定单元,配置为确定所述操作指令中包含关键字后,通过所述预设数据接口查询所述日志,得到包含所述关键字的目标日志;A query determining unit configured to, after determining that the operation instruction contains a keyword, query the log through the preset data interface to obtain a target log containing the keyword;
根据所述预设数据接口反馈的目标日志,将所述日志查询页面上的日志更新为所述目标日志。According to the target log fed back by the preset data interface, the log on the log query page is updated to the target log.
在一实施例中,所述第一执行模块40,包括:In an embodiment, the first execution module 40 includes:
维度获取单元,配置为确定所述操作指令中不包含关键字后,在所述操作指令是翻页操作指令时,将所述翻页操作指令对应的页码作为第二查询维度;A dimension obtaining unit, configured to, after determining that the operation instruction does not contain a keyword, when the operation instruction is a page turning operation instruction, use the page number corresponding to the page turning operation instruction as the second query dimension;
日志更新单元,配置为通过所述预设数据接口获取所述第二查询维度对应的目标日志,根据所述预设数据接口反馈的目标日志更新所述日志查询页面。The log update unit is configured to obtain the target log corresponding to the second query dimension through the preset data interface, and update the log query page according to the target log fed back by the preset data interface.
在一实施例中,所述的日志查询装置,包括:In an embodiment, the log query device includes:
标识获取模块,配置为确定预设时间段内没有接收到基于所述日志查询页面触发的操作指令后,获取当前登录用户的用户标识;An identification acquisition module, configured to acquire the user identification of the currently logged-in user after determining that the operation instruction triggered based on the log query page is not received within a preset time period;
第二执行模块,配置为获取所述用户标识对应的历史操作行为数据,根据所述历史操作行为数据确定操作指令,并执行所述操作指令。The second execution module is configured to obtain historical operation behavior data corresponding to the user identifier, determine an operation instruction according to the historical operation behavior data, and execute the operation instruction.
在一实施例中,所述的日志查询装置,包括:In an embodiment, the log query device includes:
请求触发模块,配置为接收到业务平台发送的异常提示后,获取所述业务平台的平台标识作为第一查询维度,并基于所述第一查询维度触发日志查询请求。The request triggering module is configured to obtain the platform identifier of the service platform as the first query dimension after receiving the abnormal prompt sent by the service platform, and trigger the log query request based on the first query dimension.
上述各程序模块所执行的方法可参照本申请日志查询方法各个实施例,此处不再赘述。For the method executed by the above-mentioned program modules, please refer to the various embodiments of the log query method of this application, which will not be repeated here.
需要说明的是,在本文中,术语“包括”、“包含”或者其任何其他变体意在涵盖非排他性的包含,从而使得包括一系列要素的过程、方法、物品或者系统不仅包括那些要素,而且还包括没有明确列出的其他要素,或者是还包括为这种过程、方法、物品或者系统所固有的要素。在没有更多限制的情况下,由语句“包括一个……”限定的要素,并不排除在包括该要素的过程、方法、物品或者系统中还存在另外的相同要素。It should be noted that in this article, the terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or system including a series of elements not only includes those elements, It also includes other elements that are not explicitly listed, or elements inherent to the process, method, article, or system. Without more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other identical elements in the process, method, article, or system that includes the element.
上述本申请实施例序号仅仅为了描述,不代表实施例的优劣。The serial numbers of the foregoing embodiments of the present application are only for description, and do not represent the advantages and disadvantages of the embodiments.
通过以上的实施方式的描述,本领域的技术人员可以清楚地了解到上述实施例方法可借助软件加必需的通用硬件平台的方式来实现,当然也可以通过硬件,但很多情况下前者是更佳的实施方式。基于这样的理解,本申请的技术方案本质上或者说对现有技术做出贡献的部分可以以软件产品的形式体现出来,该计算机软件产品存储在如上所述的一个存储介质(如ROM/RAM、磁碟、光盘)中,包括若干指令用以使得一台服务器设备(可以是手机,计算机,服务器,空调器,或者网络设备等)执行本申请各个实施例所述的方法。Through the description of the above implementation manners, those skilled in the art can clearly understand that the above-mentioned embodiment method can be implemented by means of software plus the necessary general hardware platform, of course, it can also be implemented by hardware, but in many cases the former is better.的实施方式。 Based on this understanding, the technical solution of this application essentially or the part that contributes to the existing technology can be embodied in the form of a software product, and the computer software product is stored in a storage medium (such as ROM/RAM) as described above. , Magnetic disk, optical disk), including several instructions to make a server device (can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) execute the method described in each embodiment of the present application.
以上仅为本申请的优选实施例,并非因此限制本申请的专利范围,凡是利用本申请说明书及附图内容所作的等效结构或等效流程变换,或直接或间接运用在其他相关的技术领域,均同理包括在本申请的专利保护范围内。The above are only the preferred embodiments of the application, and do not limit the scope of the patent for this application. Any equivalent structure or equivalent process transformation made using the content of the description and drawings of the application, or directly or indirectly applied to other related technical fields , The same reason is included in the scope of patent protection of this application.

Claims (10)

  1. 一种日志查询方法,其中,所述日志查询方法包括如下步骤:A log query method, wherein the log query method includes the following steps:
    接收到日志查询请求,获取所述日志查询请求对应的第一查询维度;After receiving the log query request, obtain the first query dimension corresponding to the log query request;
    调用预设数据接口查询预设的日志数据库,通过所述预设数据接口获取所述第一查询维度对应的日志;Call a preset data interface to query a preset log database, and obtain a log corresponding to the first query dimension through the preset data interface;
    根据所述预设数据接口反馈的所述日志,生成包含所述日志的日志查询页面;Generating a log query page containing the log according to the log fed back by the preset data interface;
    接收基于所述日志查询页面触发的操作指令,执行所述操作指令,以完成日志查询操作。An operation instruction triggered based on the log query page is received, and the operation instruction is executed to complete the log query operation.
  2. 如权利要求1所述的日志查询方法,其中,所述日志查询方法,还包括:5. The log query method according to claim 1, wherein the log query method further comprises:
    接收到日志采集指令,调用预设采集接口采集业务平台产生的日志,并获取所述日志的属性,其中,所述属性包括采集时间、业务平台标识、日志来源IP地址和日志标识;After receiving a log collection instruction, call a preset collection interface to collect logs generated by a business platform, and obtain attributes of the logs, where the attributes include collection time, business platform identification, log source IP address, and log identification;
    将所述日志与所述属性关联保存至预设的日志数据库。The log is associated with the attribute and saved to a preset log database.
  3. 权利要求1所述的日志查询方法,其中,所述根据所述预设数据接口反馈的所述日志,生成包含所述日志的日志查询页面的步骤之前,所述日志查询方法包括:The log query method of claim 1, wherein before the step of generating a log query page containing the log according to the log fed back by the preset data interface, the log query method comprises:
    接收到显示配置请求,输出显示配置提示,以提示用户配置日志查询页面的显示配置信息;After receiving the display configuration request, output the display configuration prompt to prompt the user to configure the display configuration information of the log query page;
    获取基于所述显示配置提示输入的显示配置信息;Acquiring display configuration information input based on the display configuration prompt;
    所述根据所述预设数据接口反馈的所述日志,生成包含所述日志的日志查询页面的步骤,包括:The step of generating a log query page containing the log according to the log fed back by the preset data interface includes:
    根据所述显示配置信息中的显示格式生成显示模板,将所述预设数据接口反馈的所述日志添加到所述显示模板中得到日志列表;Generating a display template according to the display format in the display configuration information, and adding the log fed back by the preset data interface to the display template to obtain a log list;
    在所述日志列表预设区域添加功能组件,生成包含所述日志的日志查询页面。A functional component is added to the preset area of the log list to generate a log query page containing the log.
  4. 权利要求1所述的日志查询方法,其中,所述接收基于所述日志查询页面触发的操作指令,执行所述操作指令,以完成日志查询操作的步骤,包括:The log query method of claim 1, wherein the step of receiving an operation instruction triggered based on the log query page and executing the operation instruction to complete a log query operation includes:
    接收基于所述日志查询页面触发的操作指令,判断所述操作指令中是否包含关键字;Receiving an operation instruction triggered based on the log query page, and determining whether the operation instruction contains a keyword;
    若确定所述操作指令中包含关键字,则通过所述预设数据接口查询所述日志,得到包含所述关键字的目标日志;If it is determined that the operation instruction contains a keyword, query the log through the preset data interface to obtain a target log containing the keyword;
    根据所述预设数据接口反馈的目标日志更新所述日志查询页面。Update the log query page according to the target log fed back by the preset data interface.
  5. 如权利要求4所述的日志查询方法,其中,所述接收基于所述日志查询页面触发的操作指令,判断所述操作指令中是否包含关键字的步骤之后,所述日志查询方法还包括:The log query method according to claim 4, wherein after the step of receiving an operation instruction triggered based on the log query page and determining whether the operation instruction contains a keyword, the log query method further comprises:
    若确定所述操作指令中不包含关键字,则在所述操作指令是翻页操作指令时,将所述翻页操作指令对应的页码作为第二查询维度;If it is determined that the operation instruction does not contain a keyword, when the operation instruction is a page turning operation instruction, the page number corresponding to the page turning operation instruction is used as the second query dimension;
    通过所述预设数据接口获取所述第二查询维度对应的目标日志,根据所述预设数据接口反馈的目标日志更新所述日志查询页面。Obtain the target log corresponding to the second query dimension through the preset data interface, and update the log query page according to the target log fed back by the preset data interface.
  6. 如权利要求1所述的日志查询方法,其中,所述根据所述预设数据接口反馈的所述日志,生成包含所述日志的日志查询页面的步骤之后,所述日志查询方法还包括:5. The log query method according to claim 1, wherein after the step of generating a log query page containing the log according to the log fed back by the preset data interface, the log query method further comprises:
    若确定预设时间段内没有接收到基于所述日志查询页面触发的操作指令,则获取当前登录用户的用户标识;If it is determined that the operation instruction triggered based on the log query page is not received within the preset time period, acquiring the user ID of the currently logged-in user;
    获取所述用户标识对应的历史操作行为数据,根据所述历史操作行为数据确定操作指令,并执行所述操作指令。Acquire historical operation behavior data corresponding to the user identifier, determine an operation instruction according to the historical operation behavior data, and execute the operation instruction.
  7. 如权利要求1至6任意一项所述的日志查询方法,其中,所述接收到日志查询请求,获取所述日志查询请求对应的第一查询维度的步骤之前,所述日志查询方法还包括:The log query method according to any one of claims 1 to 6, wherein before the step of receiving the log query request and obtaining the first query dimension corresponding to the log query request, the log query method further comprises:
    接收到业务平台发送的异常提示,获取所述业务平台的平台标识作为第一查询维度,并基于所述第一查询维度触发日志查询请求。Receiving the abnormal prompt sent by the service platform, acquiring the platform identifier of the service platform as the first query dimension, and triggering a log query request based on the first query dimension.
  8. 一种日志查询装置,其中,所述日志查询装置包括:A log query device, wherein the log query device includes:
    请求接收模块,配置为接收到日志查询请求后,获取所述日志查询请求对应的第一查询维度;The request receiving module is configured to obtain the first query dimension corresponding to the log query request after receiving the log query request;
    查询获取模块,配置为调用预设数据接口查询预设的日志数据库,通过所述预设数据接口获取所述第一查询维度对应的日志;The query and acquisition module is configured to call a preset data interface to query a preset log database, and obtain the log corresponding to the first query dimension through the preset data interface;
    接收生成模块,配置为根据所述预设数据接口反馈的所述日志,生成包含所述日志的日志查询页面;A receiving and generating module configured to generate a log query page containing the log according to the log fed back by the preset data interface;
    第一执行模块,配置为接收基于所述日志查询页面触发的操作指令,执行所述操作指令,以完成日志查询操作。The first execution module is configured to receive an operation instruction triggered based on the log query page, and execute the operation instruction to complete the log query operation.
  9. 一种日志查询设备,其中,所述日志查询设备包括:存储器、处理器及存储在所述存储器上并可在所述处理器上运行的日志查询程序,所述日志查询程序被所述处理器执行时实现如权利要求1至7中任一项所述的日志查询方法的步骤。A log query device, wherein the log query device includes a memory, a processor, and a log query program stored on the memory and capable of being run on the processor, and the log query program is executed by the processor The steps of the log query method according to any one of claims 1 to 7 are realized during execution.
  10. 一种计算机可读存储介质,其中,所述计算机可读存储介质上存储有日志查询程序,所述日志查询程序被处理器执行时实现如权利要求1至7中任一项所述的日志查询方法的步骤。A computer-readable storage medium, wherein a log query program is stored on the computer-readable storage medium, and when the log query program is executed by a processor, the log query according to any one of claims 1 to 7 is realized Method steps.
PCT/CN2020/112212 2019-09-23 2020-08-28 Log query method, apparatus, device, and computer-readable storage medium WO2021057383A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201910903316.4 2019-09-23
CN201910903316.4A CN110659349A (en) 2019-09-23 2019-09-23 Log query method, device, equipment and computer readable storage medium

Publications (1)

Publication Number Publication Date
WO2021057383A1 true WO2021057383A1 (en) 2021-04-01

Family

ID=69038821

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2020/112212 WO2021057383A1 (en) 2019-09-23 2020-08-28 Log query method, apparatus, device, and computer-readable storage medium

Country Status (2)

Country Link
CN (1) CN110659349A (en)
WO (1) WO2021057383A1 (en)

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110659349A (en) * 2019-09-23 2020-01-07 深圳前海微众银行股份有限公司 Log query method, device, equipment and computer readable storage medium
CN112115338A (en) * 2020-09-15 2020-12-22 平安信托有限责任公司 Page query request processing method, device, equipment and storage medium
CN112148700A (en) * 2020-10-12 2020-12-29 平安科技(深圳)有限公司 Log data processing method and device, computer equipment and storage medium
CN112491602B (en) * 2020-11-17 2023-09-26 中国平安财产保险股份有限公司 Behavior data monitoring method and device, computer equipment and medium
CN112416897B (en) * 2020-11-18 2023-07-21 青岛海尔科技有限公司 Log query method and device, storage medium and electronic device
CN112835856A (en) * 2021-02-01 2021-05-25 长沙市到家悠享网络科技有限公司 Log data query method and device, equipment and medium
CN114495378A (en) * 2022-01-21 2022-05-13 浪潮卓数大数据产业发展有限公司 Cash withdrawal information acquisition and processing method and system based on ATM

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107291872A (en) * 2017-06-16 2017-10-24 郑州云海信息技术有限公司 A kind of platform blog search rendering method based on mass data
CN108319608A (en) * 2017-01-16 2018-07-24 中国移动通信集团湖南有限公司 The method, apparatus and system of access log storage inquiry
CN110245060A (en) * 2019-05-20 2019-09-17 北京奇艺世纪科技有限公司 Service monitoring method and equipment, service monitoring device and medium
CN110659349A (en) * 2019-09-23 2020-01-07 深圳前海微众银行股份有限公司 Log query method, device, equipment and computer readable storage medium

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108319608A (en) * 2017-01-16 2018-07-24 中国移动通信集团湖南有限公司 The method, apparatus and system of access log storage inquiry
CN107291872A (en) * 2017-06-16 2017-10-24 郑州云海信息技术有限公司 A kind of platform blog search rendering method based on mass data
CN110245060A (en) * 2019-05-20 2019-09-17 北京奇艺世纪科技有限公司 Service monitoring method and equipment, service monitoring device and medium
CN110659349A (en) * 2019-09-23 2020-01-07 深圳前海微众银行股份有限公司 Log query method, device, equipment and computer readable storage medium

Also Published As

Publication number Publication date
CN110659349A (en) 2020-01-07

Similar Documents

Publication Publication Date Title
WO2021057383A1 (en) Log query method, apparatus, device, and computer-readable storage medium
US10956834B2 (en) Tool for machine-learning data analysis
US11928242B2 (en) Masking personally identifiable information from machine-generated data
US11822640B1 (en) User credentials verification for search
US11798209B1 (en) Systems and methods for rendering a third party visualization in response to events received from search queries
US11698900B2 (en) Leveraging search query history in a search interface
US10997190B2 (en) Context-adaptive selection options in a modular visualization framework
JP5815563B2 (en) Method and system for e-commerce transaction data accounting
US20200372007A1 (en) Trace and span sampling and analysis for instrumented software
US10235409B2 (en) Identifying field values based on delimiters
US11544911B1 (en) Manipulation of virtual object position within a plane of an extended reality environment
WO2014182585A1 (en) Recommending context based actions for data visualizations
US11477263B2 (en) Identifying un-deployed features of an application
JP5764255B2 (en) User operation detection system and user operation detection method
WO2021159783A1 (en) Web page interface query method and apparatus, electronic device, and storage medium
US11782958B2 (en) Multi-user cross-device tracking
US20220318319A1 (en) Focus Events
CN111047434B (en) Operation record generation method and device, computer equipment and storage medium
CN112182025A (en) Log analysis method, device, equipment and computer readable storage medium
US8290976B2 (en) Systems and methods for executing a navigation query
US11237946B2 (en) Error finder tool
US11501112B1 (en) Detecting, diagnosing, and directing solutions for source type mislabeling of machine data, including machine data that may contain PII, using machine learning
US11354012B1 (en) Automated placement and time selection for dashboard panels in an extended reality environment
US10769164B2 (en) Simplified access for core business with enterprise search

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 20868093

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 20868093

Country of ref document: EP

Kind code of ref document: A1