FIELD EXTRACTION OF HETEROGENEOUS LOG RECORDS WITH RECURSIVE SUB PARSING AT INGEST TIME

    公开(公告)号:US20250103307A1

    公开(公告)日:2025-03-27

    申请号:US18474947

    申请日:2023-09-26

    Abstract: A system and computer-implemented method for a log analytics system that can configure, collect, parse, and analyze log records in an efficient manner. Log records are accessed, each of the log records is associated with a log source. A base parser is identified for parsing a log record based on a type of the log record indicated in the log source. The log record is parsed using the base parser to extract base field values corresponding to base fields. A base-parsed log record is generated on parsing. Sub-parsers are identified using field mappings. The field mappings include base field values mapped to corresponding sub-parsers. The base-parsed log record is parsed using the sub-parsers to extract sub-fields. The sub-fields are merged to the base fields to generate and present an output that includes the parsed log record, the base fields, base field values, the sub-fields and the sub-field values.

Patent Agency Ranking