公开(公告)号：WO2016048652A1

公开(公告)日：2016-03-31

申请号：PCT/US2015/048967

申请日：2015-09-08

Applicant: NEC LABORATORIES AMERICA, INC.

Inventor： ZHANG, Hui ,  XU, Jianwu ,  GUOFEI, Jiang ,  YOSHIHIRA, Kenji

IPC: G06F11/34 ,  G06F11/30

CPC classification number: G06N99/005

Abstract: A method and system are provided. The method includes performing (320), by a logs-to-time-series converter, a logs-to-time-series conversion by transforming a plurality of heterogeneous logs into a set of time series. Each of the heterogeneous logs includes a time stamp and text portion with one or more fields. The method further includes performing (330), by a time-series-to-sequential-pattern converter, a time-series-to-sequential-pattern conversion by mining invariant relationships between the set of time series, and discovering sequential message patterns and association rules in the plurality of heterogeneous logs using the invariant relationships. The method also includes executing (340), by a processor, a set of log management applications, based on the sequential message patterns and the association rules.

Abstract translation: 提供了一种方法和系统。 该方法包括：通过日志到时间序列转换器，通过将多个异构日志变换为一组时间序列来执行（320）日志到时间序列转换。 每个异类日志包括具有一个或多个字段的时间戳和文本部分。 该方法还包括通过时间序列顺序模式转换器对时间序列到序列模式转换执行（330），该时间序列到序列模式转换通过挖掘该组时间序列之间的不变关系，并且发现顺序消息模式和 使用不变关系在多个异构日志中的关联规则。 该方法还包括基于顺序消息模式和关联规则，由处理器执行（340）一组日志管理应用程序。