CN101325520B - 基于日志的智能自适应网络故障定位和分析方法 - Google Patents
基于日志的智能自适应网络故障定位和分析方法 Download PDFInfo
- Publication number
- CN101325520B CN101325520B CN2008101241955A CN200810124195A CN101325520B CN 101325520 B CN101325520 B CN 101325520B CN 2008101241955 A CN2008101241955 A CN 2008101241955A CN 200810124195 A CN200810124195 A CN 200810124195A CN 101325520 B CN101325520 B CN 101325520B
- Authority
- CN
- China
- Prior art keywords
- node
- chained list
- total number
- event times
- events
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
- 238000000034 method Methods 0.000 title claims abstract description 15
- 238000004458 analytical method Methods 0.000 claims abstract description 18
- 238000003491 array Methods 0.000 claims description 3
- 238000005259 measurement Methods 0.000 claims description 3
- 238000007621 cluster analysis Methods 0.000 abstract description 6
- 238000007619 statistical method Methods 0.000 abstract description 6
- 230000007246 mechanism Effects 0.000 abstract description 3
- 230000003044 adaptive effect Effects 0.000 abstract 1
- 230000002349 favourable effect Effects 0.000 abstract 1
- 238000007781 pre-processing Methods 0.000 abstract 1
- 230000001960 triggered effect Effects 0.000 abstract 1
- 238000007726 management method Methods 0.000 description 16
- 238000007418 data mining Methods 0.000 description 5
- 230000009471 action Effects 0.000 description 3
- 239000000284 extract Substances 0.000 description 3
- 230000004044 response Effects 0.000 description 3
- 230000001932 seasonal effect Effects 0.000 description 3
- 238000012550 audit Methods 0.000 description 2
- 238000013475 authorization Methods 0.000 description 2
- 238000013500 data storage Methods 0.000 description 2
- 238000001514 detection method Methods 0.000 description 2
- 230000006866 deterioration Effects 0.000 description 2
- 230000005484 gravity Effects 0.000 description 2
- 238000012544 monitoring process Methods 0.000 description 2
- 230000000737 periodic effect Effects 0.000 description 2
- 238000012552 review Methods 0.000 description 2
- 241000700605 Viruses Species 0.000 description 1
- 230000002159 abnormal effect Effects 0.000 description 1
- 230000005856 abnormality Effects 0.000 description 1
- 230000002547 anomalous effect Effects 0.000 description 1
- 238000012098 association analyses Methods 0.000 description 1
- 230000003542 behavioural effect Effects 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000005540 biological transmission Effects 0.000 description 1
- 238000013480 data collection Methods 0.000 description 1
- 238000003745 diagnosis Methods 0.000 description 1
- 230000004069 differentiation Effects 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 238000001914 filtration Methods 0.000 description 1
- 230000009545 invasion Effects 0.000 description 1
- 238000012423 maintenance Methods 0.000 description 1
- 239000000463 material Substances 0.000 description 1
- 238000010606 normalization Methods 0.000 description 1
- 230000002265 prevention Effects 0.000 description 1
- 238000012913 prioritisation Methods 0.000 description 1
- 230000008569 process Effects 0.000 description 1
- 230000002035 prolonged effect Effects 0.000 description 1
- 230000000246 remedial effect Effects 0.000 description 1
- 238000011160 research Methods 0.000 description 1
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
- Computer And Data Communications (AREA)
Abstract
Description
Numerical Code | Facility | 描述 |
0 | kernel messages | 内核日志消息 |
1 | user-level messages | 随机的用户日志消息 |
2 | mail system | 邮件***日志消息 |
3 | system daemons | ***守护进程日志消息 |
4 | security/authorization messages | 安全管理日志消息 |
5 | messages generated internally by syslogd | syslogd本身的日志消息 |
6 | line printer subsystem | 打印子***日志消息 |
7 | network news subsystem | 新闻服务子***日志消息 |
8 | UUCP subsystem | UUCP子***日志消息 |
9 | clock daemon | ***始终守护进程日志消息 |
10 | security/authorization messages | 私有的安全管理日志消息 |
11 | FTP daemon | FTP守护进程日志消息 |
12 | NTP subsystem | NTP***日志消息 |
13 | log audit | 日志审计 |
14 | log alert | 日志警报 |
15 | clock daemon | ***始终守护进程日志消息 |
16 | local use 0(local0) | 保留为本地使用0 |
17 | local use 1(local1) | 保留为本地使用1 |
18 | local use 2(local2) | 保留为本地使用2 |
19 | local use 3(local3) | 保留为本地使用3 |
20 | local use 4(local4) | 保留为本地使用4 |
21 | local use 5(local5) | 保留为本地使用5 |
22 | local use 6(local6) | 保留为本地使用6 |
23 | local use 7(local7) | 保留为本地使用7 |
NumericalCode | Severity | 描述 |
0 | Emergency:system is unusable | 紧急:***不可用 |
1 | Alert:action must be taken immediately | 告警:应马上行动 |
2 | Critical:critical conditions | 严重:有严重情况发生 |
3 | Error:error conditions | 错误:错误消息 |
NumericalCode | Severity | 描述 |
4 | Warning:warning conditions | 警告:警告消息 |
5 | Notice:normal but significant condition | 通知:正常但重要的消息 |
6 | Informational:informational messages | 信息:普通信息 |
7 | Debug:debug-level messages | 调试:调试信息(大量) |
日志级别 | 日志级别描述 | ***状态 |
0 | 紧急(Emergencies) | ***不可用 |
1 | 告警(Alerts) | 应马上行动 |
2 | 严重的(Critical) | 有严重情况发生 |
3 | 错误(Errors) | 错误消息 |
4 | 警告(Warnings) | 警告消息 |
5 | 通知(Notifications) | 正常但重要的消息 |
6 | 信息(Informational) | 普通信息 |
7 | 调试(debugging) | 调试信息(大量) |
Claims (1)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN2008101241955A CN101325520B (zh) | 2008-06-17 | 2008-06-17 | 基于日志的智能自适应网络故障定位和分析方法 |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN2008101241955A CN101325520B (zh) | 2008-06-17 | 2008-06-17 | 基于日志的智能自适应网络故障定位和分析方法 |
Publications (2)
Publication Number | Publication Date |
---|---|
CN101325520A CN101325520A (zh) | 2008-12-17 |
CN101325520B true CN101325520B (zh) | 2010-08-18 |
Family
ID=40188862
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN2008101241955A Expired - Fee Related CN101325520B (zh) | 2008-06-17 | 2008-06-17 | 基于日志的智能自适应网络故障定位和分析方法 |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN101325520B (zh) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US11797538B2 (en) | 2020-12-03 | 2023-10-24 | International Business Machines Corporation | Message correlation extraction for mainframe operation |
Families Citing this family (41)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101753382B (zh) * | 2010-01-25 | 2013-07-24 | 浪潮通信信息***有限公司 | 一种自适应网络故障监控定位安全模型的构建方法 |
CN102185710A (zh) * | 2011-04-26 | 2011-09-14 | 中兴通讯股份有限公司 | 一种单板日志的管理方法及日志管理*** |
CN103036697B (zh) * | 2011-10-08 | 2015-07-15 | 阿里巴巴集团控股有限公司 | 一种多维度数据去重方法及*** |
CN102946429A (zh) * | 2012-11-07 | 2013-02-27 | 浪潮电子信息产业股份有限公司 | 一种基于云存储的高效资源动态调度方法 |
CN103138989B (zh) * | 2013-02-25 | 2016-12-28 | 武汉华工安鼎信息技术有限责任公司 | 一种海量日志分析***及方法 |
CN103200027A (zh) * | 2013-03-01 | 2013-07-10 | 中国工商银行股份有限公司 | 一种定位网络故障的方法、装置及*** |
CN103401310B (zh) * | 2013-08-07 | 2016-08-17 | 宁波瑞曼特新材料有限公司 | 一种适用于智能变电站一次设备智能化的智能组件 |
CN103617109B (zh) * | 2013-10-23 | 2016-04-27 | 上海华力微电子有限公司 | 探针机台日志文件的警告处理***和方法 |
CN104750694B (zh) * | 2013-12-26 | 2019-02-05 | 北京亿阳信通科技有限公司 | 一种移动网络信息溯源方法和装置 |
CN103761173A (zh) * | 2013-12-28 | 2014-04-30 | 华中科技大学 | 一种基于日志的计算机***故障诊断方法及装置 |
CN103793479A (zh) * | 2014-01-14 | 2014-05-14 | 上海上讯信息技术股份有限公司 | 日志管理方法及*** |
CN104268064B (zh) * | 2014-09-11 | 2018-03-27 | 北京音之邦文化科技有限公司 | 产品日志的异常诊断方法和装置 |
CN104462606B (zh) * | 2014-12-31 | 2018-06-22 | 中国科学院深圳先进技术研究院 | 一种基于日志数据确定诊断处理措施的方法 |
CN104951555A (zh) * | 2015-06-30 | 2015-09-30 | 浪潮(北京)电子信息产业有限公司 | 一种日志信息管理方法及日志信息管理终端 |
CN105243147A (zh) * | 2015-10-22 | 2016-01-13 | 浪潮(北京)电子信息产业有限公司 | 一种MySQL数据库慢查询日志的管理方法及*** |
CN105528280B (zh) * | 2015-11-30 | 2018-11-23 | 中电科华云信息技术有限公司 | ***日志与健康监控关系决定日志告警等级的方法及*** |
CN105577440B (zh) * | 2015-12-24 | 2019-06-11 | 华为技术有限公司 | 一种网络故障时间定位方法和分析设备 |
CN105471659B (zh) * | 2015-12-25 | 2019-03-01 | 华为技术有限公司 | 一种故障根因分析方法和分析设备 |
CN105930348B (zh) * | 2016-04-06 | 2019-06-04 | 广州广电运通金融电子股份有限公司 | 一种基于日志分析的故障定位方法及装置 |
CN106055608B (zh) * | 2016-05-25 | 2019-06-07 | 北京百度网讯科技有限公司 | 自动采集和分析交换机日志的方法和装置 |
CN107454614A (zh) * | 2016-05-31 | 2017-12-08 | 迈普通信技术股份有限公司 | 一种定位Modem死机的方法及装置 |
CN106339297B (zh) * | 2016-09-14 | 2020-10-02 | 郑州云海信息技术有限公司 | 一种存储***故障实时告警的方法及*** |
CN108111557B (zh) * | 2016-11-24 | 2021-06-11 | 杭州海康威视数字技术股份有限公司 | 一种获取云存储***中数据的方法及装置 |
CN107241220A (zh) * | 2017-05-26 | 2017-10-10 | 京信通信***(中国)有限公司 | 产品老化监控自动分析方法和*** |
CN108984362A (zh) * | 2017-05-31 | 2018-12-11 | 北京京东尚科信息技术有限公司 | 日志采集方法及装置、存储介质、电子设备 |
CN113407507B (zh) | 2018-04-23 | 2022-04-29 | 华为技术有限公司 | 告警类型关联规则的生成方法、装置及***、存储介质 |
CN109766254B (zh) * | 2018-12-17 | 2022-04-08 | 上海华讯网络***有限公司 | It***运维监控数据辅助预处理方法和*** |
CN111555895B (zh) * | 2019-02-12 | 2023-02-21 | 北京数安鑫云信息技术有限公司 | 一种分析网站故障的方法、装置、存储介质及计算机设备 |
CN110188082A (zh) * | 2019-04-25 | 2019-08-30 | 视联动力信息技术股份有限公司 | 一种日志文件的处理方法及装置 |
CN110677271B (zh) * | 2019-08-16 | 2022-06-24 | 平安科技(深圳)有限公司 | 基于elk的大数据告警方法、装置、设备及存储介质 |
CN111177108A (zh) * | 2019-12-30 | 2020-05-19 | 论客科技(广州)有限公司 | 一种基于组织内部邮件日志分析的安全可视化方法及*** |
CN112181758B (zh) * | 2020-08-19 | 2023-07-28 | 南京邮电大学 | 一种基于网络拓扑及实时告警的故障根因定位方法 |
US11243835B1 (en) | 2020-12-03 | 2022-02-08 | International Business Machines Corporation | Message-based problem diagnosis and root cause analysis |
US11403326B2 (en) | 2020-12-03 | 2022-08-02 | International Business Machines Corporation | Message-based event grouping for a computing operation |
US11599404B2 (en) | 2020-12-03 | 2023-03-07 | International Business Machines Corporation | Correlation-based multi-source problem diagnosis |
US11995562B2 (en) | 2020-12-03 | 2024-05-28 | International Business Machines Corporation | Integrating documentation knowledge with log mining for system diagnosis |
US11474892B2 (en) | 2020-12-03 | 2022-10-18 | International Business Machines Corporation | Graph-based log sequence anomaly detection and problem diagnosis |
US11513930B2 (en) | 2020-12-03 | 2022-11-29 | International Business Machines Corporation | Log-based status modeling and problem diagnosis for distributed applications |
CN113407592B (zh) * | 2021-06-07 | 2023-11-03 | 深圳明锐理想科技有限公司 | 一种pcb生产线故障定位方法和设备 |
CN114089722B (zh) * | 2021-11-17 | 2024-03-26 | 国家石油天然气管网集团有限公司 | 一种输气站场工控网络通讯故障便携式诊断方法 |
CN114024838A (zh) * | 2021-11-26 | 2022-02-08 | 北京天融信网络安全技术有限公司 | 日志处理方法、装置及电子设备 |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1642097A (zh) * | 2004-01-02 | 2005-07-20 | 联想(北京)有限公司 | 日志统计方法和*** |
CN1878093A (zh) * | 2006-07-19 | 2006-12-13 | 华为技术有限公司 | 安全事件关联分析方法和*** |
CN1889557A (zh) * | 2006-07-10 | 2007-01-03 | 北京工业大学 | 远程xml数据更新方法以及*** |
-
2008
- 2008-06-17 CN CN2008101241955A patent/CN101325520B/zh not_active Expired - Fee Related
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1642097A (zh) * | 2004-01-02 | 2005-07-20 | 联想(北京)有限公司 | 日志统计方法和*** |
CN1889557A (zh) * | 2006-07-10 | 2007-01-03 | 北京工业大学 | 远程xml数据更新方法以及*** |
CN1878093A (zh) * | 2006-07-19 | 2006-12-13 | 华为技术有限公司 | 安全事件关联分析方法和*** |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US11797538B2 (en) | 2020-12-03 | 2023-10-24 | International Business Machines Corporation | Message correlation extraction for mainframe operation |
Also Published As
Publication number | Publication date |
---|---|
CN101325520A (zh) | 2008-12-17 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN101325520B (zh) | 基于日志的智能自适应网络故障定位和分析方法 | |
CN106371986A (zh) | 一种日志处理运维监控*** | |
Vaarandi | A data clustering algorithm for mining patterns from event logs | |
CN107992398A (zh) | 一种业务***的监控方法和监控*** | |
CN109902072A (zh) | 一种日志处理*** | |
CA3028273A1 (en) | Cybersecurity system | |
CN111309565B (zh) | 告警处理方法、装置、电子设备以及计算机可读存储介质 | |
CN100518076C (zh) | 日志统计方法和*** | |
CN102918534A (zh) | 查询管道 | |
Zhe et al. | DoS attack detection model of smart grid based on machine learning method | |
CN111259073A (zh) | 基于日志、流量和业务访问的业务***运行状态智能研判*** | |
CN104574219A (zh) | 电网业务信息***运行工况的监测预警方法及*** | |
CN108259202A (zh) | 一种ca监测预警方法和ca监测预警*** | |
CN112416872A (zh) | 一种基于大数据的云平台日志管理*** | |
CN111274276A (zh) | 操作审计方法、装置及电子设备和计算机可读存储介质 | |
CN104579782A (zh) | 一种热点安全事件的识别方法及*** | |
US10389641B2 (en) | Network operation | |
CN102195791A (zh) | 一种告警的分析方法、装置及*** | |
RU180789U1 (ru) | Устройство аудита информационной безопасности в автоматизированных системах | |
Ya et al. | Mining host behavior patterns from massive network and security logs | |
CN117914511A (zh) | 一种基于数据交换、日志分析的安全审计*** | |
CN107590008B (zh) | 一种通过加权熵判断分布式集群可靠度的方法和*** | |
CN114531338A (zh) | 一种基于调用链数据的监控告警和溯源方法及*** | |
CN113778671A (zh) | 一种日志数据处理方法、***及装置 | |
CN112769755A (zh) | 一种面向威胁检测的dns日志统计特征抽取方法 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
C14 | Grant of patent or utility model | ||
GR01 | Patent grant | ||
C53 | Correction of patent of invention or patent application | ||
CB03 | Change of inventor or designer information |
Inventor after: Wang Pan Inventor after: Zhang Shunyi Inventor after: Li Tian Inventor before: Zhang Shunyi Inventor before: Li Tian Inventor before: Wang Pan |
|
COR | Change of bibliographic data |
Free format text: CORRECT: INVENTOR; FROM: ZHANG SHUNYI LI TIAN WANG PAN TO: WANG PAN ZHANG SHUNYI LI TIAN |
|
EE01 | Entry into force of recordation of patent licensing contract |
Application publication date: 20081217 Assignee: Zhongbo Information Technology Research Institute Co., Ltd. Assignor: Nanjing Post & Telecommunication Univ. Contract record no.: 2016320000103 Denomination of invention: Method for locating and analyzing fault of intelligent self-adapting network based on log Granted publication date: 20100818 License type: Exclusive License Record date: 20160307 |
|
LICC | Enforcement, change and cancellation of record of contracts on the licence for exploitation of a patent or utility model | ||
EC01 | Cancellation of recordation of patent licensing contract |
Assignee: Zhongbo Information Technology Research Institute Co., Ltd. Assignor: Nanjing Post & Telecommunication Univ. Contract record no.: 2016320000103 Date of cancellation: 20160329 |
|
LICC | Enforcement, change and cancellation of record of contracts on the licence for exploitation of a patent or utility model | ||
C41 | Transfer of patent application or patent right or utility model | ||
TR01 | Transfer of patent right |
Effective date of registration: 20160519 Address after: 215123, room 188, comprehensive building, 203 Ai Ai Road, Suzhou Industrial Park, Jiangsu, Suzhou Patentee after: RunTrend Technology Inc. Address before: 210003 Nanjing City, Jiangsu Province, the new model road No. 66 Patentee before: Nanjing Post & Telecommunication Univ. |
|
CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20100818 Termination date: 20210617 |
|
CF01 | Termination of patent right due to non-payment of annual fee |