CN106657184B - The analysis method and device of log information - Google Patents

The analysis method and device of log information Download PDF

Info

Publication number
CN106657184B
CN106657184B CN201510728082.6A CN201510728082A CN106657184B CN 106657184 B CN106657184 B CN 106657184B CN 201510728082 A CN201510728082 A CN 201510728082A CN 106657184 B CN106657184 B CN 106657184B
Authority
CN
China
Prior art keywords
information
field
cookie
cookie information
log information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201510728082.6A
Other languages
Chinese (zh)
Other versions
CN106657184A (en
Inventor
郭涛
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Gridsum Technology Co Ltd
Original Assignee
Beijing Gridsum Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Gridsum Technology Co Ltd filed Critical Beijing Gridsum Technology Co Ltd
Priority to CN201510728082.6A priority Critical patent/CN106657184B/en
Publication of CN106657184A publication Critical patent/CN106657184A/en
Application granted granted Critical
Publication of CN106657184B publication Critical patent/CN106657184B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/14Session management
    • H04L67/146Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/50Network services
    • H04L67/56Provisioning of proxy services
    • H04L67/568Storing data temporarily at an intermediate stage, e.g. caching

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Debugging And Monitoring (AREA)

Abstract

The invention discloses a kind of analysis method and devices of log information, are related to information technology field, and main purpose is to solve the mode of current record log information, will lead to the lower problem of the efficiency of log information parsing.The described method includes: when receiving log information recording instruction, the first field and the second field are obtained from log information, wherein, first field is used to save the cookie information of user end to server transmission, and second field is for saving the cookie information that server is sent to client;Cookie information is extracted from first field, and/or extracts cookie information from second field;The cookie information is allocated to preset variable and by the preset variable save into log information, the preset variable is for parsing the log information.The present invention is suitable for the parsing of log information.

Description

The analysis method and device of log information
Technical field
The present invention relates to information technology field more particularly to a kind of analysis method and devices of log information.
Background technique
Cookie (plural form Cookies), Chinese are small-sized text file, refer to certain Website servers to distinguish Whether other user is legitimate user and the data for whether needing to log in generation again.Wherein, Website server can use It include information, the association such as maintenance hypertext transfer protocol (Hyper Text Transport Protocol, HTTP) in Cookies State in view transmission.When user is by browser access server for the first time, do not carried in the access request of browser Cookie information, server can generate cookie information, and cookie information is sent to browser;When user passes through browser again When secondary access server, cookie information is carried in the access request of browser, server can receive browser transmission Cookie information.Usual server can configure the cookie information of the first field record browser transmission, configuration the second field note Record server is sent to the cookie information of browser.
Currently, server in record log information, directly records cookie letter in the way of server configuration field Breath records that browser is sent to the cookie information of server and server is sent to browser by two fields respectively Cookie information.However, if when record log information record browser respectively by two fields and be sent to server Cookie information and server are sent to the cookie information of browser, it is subsequent log information is parsed when, Wu Fabao Card server can directly acquire cookie information, when server can not obtain cookie information from the first field, need Cookie information is obtained from the second field, causes the resolving of log information more complicated, so as to cause log information solution The efficiency of analysis is lower.
Summary of the invention
In view of the above problems, it proposes on the present invention overcomes the above problem or at least be partially solved in order to provide one kind State the analysis method and device of the log information of problem.
According to one aspect of the present invention, the invention proposes a kind of analytic methods of log information, comprising:
When receiving log information recording instruction, the first field and the second field are obtained from log information, wherein institute State the first field for save user end to server transmission cookie information, second field for save server to The cookie information that client is sent;
Cookie information is extracted from first field, and/or
Cookie information is extracted from second field;
The cookie information is allocated to preset variable and by the preset variable save into log information, it is described pre- Variable is set for parsing to the log information.
According to another aspect of the invention, the invention proposes a kind of resolvers of log information, comprising:
Acquiring unit, for obtaining the first field and the from log information when receiving log information recording instruction Two fields, wherein first field is used to save the cookie information of user end to server transmission, and second field is used In the cookie information that preservation server is sent to client;
Extraction unit is used to extract cookie information from first field, and/or
Cookie information is extracted from second field;
Configuration unit, for the cookie information to be allocated to preset variable;
Storage unit, for, into log information, the preset variable to be used for the day by the preset variable save Will information is parsed.
By above-mentioned technical proposal, a kind of analysis method and device of log information provided by the invention.When receiving day When will information recording instruction, the first field and the second field are obtained from log information, wherein first field is for saving The cookie information that user end to server is sent, second field is for saving the cookie that server is sent to client Information;Cookie information is extracted from first field, and/or extracts cookie information from second field;It will be described Cookie information is allocated to preset variable and by the preset variable save into log information, and the preset variable is used for institute Log information is stated to be parsed.With in record log information, directly recorded in the way of server configuration field at present Cookie information records that server is sent to the cookie information of browser and browser is sent to by two fields respectively The cookie information of server is compared, and the present invention records cookie information by preset variable, can be realized to log information When being parsed, cookie information can be obtained from preset variable, so as to simplify the step of log information parses, into And it is able to ascend the efficiency of log information parsing.
Detailed description of the invention
By reading the following detailed description of the preferred embodiment, various other advantages and benefits are common for this field Technical staff will become clear.The drawings are only for the purpose of illustrating a preferred embodiment, and is not considered as to the present invention Limitation.And throughout the drawings, the same reference numbers will be used to refer to the same parts.In the accompanying drawings:
Fig. 1 shows a kind of flow chart of the analytic method of log information provided in an embodiment of the present invention;
Fig. 2 shows the flow charts of the analytic method of another log information provided in an embodiment of the present invention;
Fig. 3 shows a kind of structural schematic diagram of the resolver of log information provided in an embodiment of the present invention;
Fig. 4 shows a kind of structural schematic diagram of the resolver of log information provided in an embodiment of the present invention.
Specific embodiment
Exemplary embodiments of the present disclosure are described in more detail below with reference to accompanying drawings.Although showing the disclosure in attached drawing Exemplary embodiment, it being understood, however, that may be realized in various forms the disclosure without should be by embodiments set forth here It is limited.On the contrary, these embodiments are provided to facilitate a more thoroughly understanding of the present invention, and can be by the scope of the present disclosure It is fully disclosed to those skilled in the art.
The embodiment of the invention provides a kind of analytic methods of log information, can be applied to server, as shown in Figure 1, This method comprises:
101, when receiving log information recording instruction, the first field and the second word are obtained from access log information Section.
Wherein, first field is used to save the cookie information of user end to server transmission, second field The cookie information sent for saving server to client.The cookie information can be the word that server generates at random Symbol string, such as 58c8d60cd2b94642a7da48d61e173e13.Whether server is legitimate user to know access user And whether user needs to log in again, it will usually generate the cookie information of unique identification user.Server can be Nginx (engine x) server, wherein Nginx is a high performance HTTP and Reverse Proxy and an IMAP/ POP3/SMTP server.When server is Nginx server, the configuration of log field can be carried out by following configuration:
log_format main'$remote_addr-$remote_user[$time_local]$query_string'
'$status$body_bytes_sent"$http_referer"'
'"$http_user_agent""$http_x_forwarded_for";
For example, first field can be cookie_XXXX, XXXX can be the identification information of cookie information, tool It can be to body the title of cookie information.User end to server sends cookie information and is properly termed as request cookie, visitor After the back-call server of family end, $ cookie_XXXX has value, when client access server for the first time, access log Information can not record cookie information, and the value of $ cookie_XXXX is sky.Second field can be sent_http_set_ Cookie, server are properly termed as response cookie to the cookie information that client is sent, when access takes client for the first time When business device, $ sent_http_set_cookie has value, and $ sent_http_set_cookie is sky later.Such as when client first When secondary access server, server generates " testid=58c8d60cd2b94642a7da48d61e173e13;Expires= Fri, 26-Jun-15 11:45:38GMT;Domain=gridsumdissector.com;Path=/", and it is saved into $ In sent_http_set_cookie.Wherein, 58c8d60cd2b94642a7da48d61e173e13 is cookie information, Testid can be the title of cookie information.Usual second field can save cookie information in the form of key-value pair.Work as visitor When family end accesses server again, the cookie information can be carried in access request, server does not need to regenerate 58c8d60cd2b94642a7da48d61e173e13 is directly saved in $ cookie_testid by cookie information.
102, cookie information is extracted from the first field, and/or extracts cookie information from the second field.
For the embodiment of the present invention, step 102 is specifically as follows: believing in detection first field with the presence or absence of cookie Breath;If it exists, then cookie information is extracted from first field;If it does not exist, then cookie is extracted from second field Information.I.e. when receiving log information recording instruction, the first field $ cookie_testid is read, judges the first field $ Whether cookie_testid is empty, if the first field $ cookie_testid is sky, illustrates that the user passes through client first Secondary access server reads the second field $ sent_http_set_cookie at this time, to $ sent_http_set_cookie into Line character string intercepting process, if sent_http_set_cookie is " testid=58c8d60cd2b94642a7da48d61 e173e13;Expires=Fri, 26-Jun-15 11:45:38GMT;Domain=gridsumdissector.com;path =/", extracts 58c8d60cd2b94642a7da48d61e173e13.If the first field $ cookie_testid is not Sky is 58c8d60cd2b94642a7da48d61e173e13, then illustrating the user not is to access server for the first time, is mentioned at this time Take the 58c8d60cd2b94642a7da48d61e173e13 in the first field $ cookie_testid.
For the embodiment of the present invention, step 102 specifically can be with are as follows: whether there is cookie in detection second field Information;If it exists, then cookie information is extracted from second field;If it does not exist, then it is extracted from first field Cookie information.The present invention to cookie information is extracted from the first field or extracts the sequence of cookie information not from the second field It limits.
103, cookie information is allocated to preset variable and by preset variable save into log information.
Wherein, the preset variable is for parsing the log information.The preset variable can be to receive To before log information recording instruction, pre-set variable.For example, preset variable can be my_cookie.By by Cookie information in one field or the second field, which extracts, is allocated to preset variable, can be realized and is protected by a variable Deposit cookie information.In the parsing of subsequent log information, cookie information can be directly acquired, so as to simplify log letter The resolving of breath, and then it is able to ascend the efficiency of log information parsing.
For example, when preset variable is my_cookie, it can be with by the concrete form of preset variable save to log information Are as follows: log_format main'$ remote_addr- $ remote_user [$ time_local] $ query_string $ my_ cookie'
'$status$body_bytes_sent"$http_referer"'
'"$http_user_agent""$http_x_forwarded_for"';
A kind of analytic method of log information provided by the invention.When receiving log information recording instruction, from access The first field and the second field are obtained in log information, wherein first field is for saving user end to server transmission Cookie information, second field is for saving the cookie information that server is sent to client;From first word Section extracts cookie information, and/or extracts cookie information from second field;The cookie information is allocated to preset Variable and by the preset variable save into log information, the preset variable is for parsing the log information. With in record log information, cookie information is directly recorded in the way of server configuration field at present, that is, pass through two Field records that server is sent to the cookie information of browser and browser is sent to the cookie information phase of server respectively Than the present invention records cookie information by preset variable, can be realized when parsing to log information, from preset variable In can obtain cookie information, the step of so as to simplify log information parsing, and then be able to ascend log information solution The efficiency of analysis.
The embodiment of the invention provides the analytic methods of another log information, can be applied to server, such as Fig. 2 institute Show, this method comprises:
201, preset variable is set.
Wherein, the preset variable is for saving cookie information.For example, preset variable can be my_cookie.
202, when receiving log information recording instruction, the first field and the second word are obtained from access log information Section.
Wherein, first field is used to save the cookie information of user end to server transmission, second field The cookie information sent for saving server to client.
203, detecting whether there is cookie information in the first field.If detecting in the first field there are cookie information, Then execute 204;Cookie information is not present in the first field if detecting, executes 205.
204, cookie information is extracted from the first field.
For the embodiment of the present invention, it is described if it exists, then, can be with after extracting cookie information from first field It include: to generate the corresponding identification information of the cookie information.Wherein, the corresponding identification information of the cookie information can be The identity number (Idtentify, ID) of the title of the cookie information or the cookie information.
For example, being generated if the first field $ cookie_testid is 58c8d60cd2b94642a7da48d61e173e13 The cookie information entitled testid, then 58c8d60cd2b94642a7da48d61e173e13 is extracted, And spliced with testid, it is spliced into " testid=58c8d60cd2b94642a7da48d61e173e13 ".
205, cookie information is extracted from the second field.
For the embodiment of the present invention, step 205 is specifically as follows: if it does not exist, then extracting cookie letter from the second field Cease identification information corresponding with cookie information.
For example, if the second field $ sent_http_set_cookie is " testid_A=59c8d60cd2b94642a7d a48d61e173e13;Expires=Fri, 26-Jun-1511:45:38GMT;Domain=gridsumdissector.com; Path=/" extracts " testid_A=59c8d60cd2b94642a7da48d61e173e13 ".
206, cookie information is allocated to preset variable and by preset variable save into log information.
Wherein, the preset variable is for parsing the log information.
For the embodiment of the present invention, step 205 is specifically as follows: by the cookie information and the cookie information pair The identification information answered is allocated to preset variable.
For example, the cookie information that $ my_cookie is saved is " testid=58c8d60cd2b94642a7da48d61e 173e13 ", " testid_A=59c8d60cd2b94642a7da48d61e173e13 ".By by the first field or the second word Cookie information in section, which extracts, is allocated to preset variable, can be realized through a variable save cookie information.? When subsequent log information parses, cookie information can be directly acquired, so as to simplify the resolving of log information, into And it is able to ascend the efficiency of log information parsing.
The analytic method of another kind log information provided by the invention.When receiving log information recording instruction, from visit It asks and obtains the first field and the second field in log information, wherein first field is for saving user end to server hair The cookie information sent, second field is for saving the cookie information that server is sent to client;From described first Field extracts cookie information, and/or extracts cookie information from second field;The cookie information is allocated to pre- Set variable and by the preset variable save into log information, the preset variable is for solving the log information Analysis.With in record log information, cookie information is directly recorded in the way of server configuration field at present, that is, pass through two A field records that server is sent to the cookie information of browser and browser is sent to the cookie information of server respectively It compares, the present invention records cookie information by preset variable, can be realized when parsing to log information, from preset change Cookie information can be obtained in amount, so as to simplify the step of log information parses, and then be able to ascend log information The efficiency of parsing.
Further, the embodiment of the invention provides a kind of resolvers of log information, as shown in figure 3, the device packet It includes: acquiring unit 31, extraction unit 32, configuration unit 33, storage unit 34.
Acquiring unit 31, for when receive log information recording instruction when, obtained from log information the first field and Second field, wherein first field is used to save the cookie information of user end to server transmission, second field The cookie information sent for saving server to client.
Extraction unit 32, for being extracted from first field extraction cookie information, and/or from second field Cookie information.
Configuration unit 33, for the cookie information to be allocated to preset variable.
Storage unit 34, for, into log information, the preset variable to be used for described by the preset variable save Log information is parsed.
Such as Fig. 4, the extraction unit 32 includes: detection module 3201 and extraction module 3202.
Detection module 3201, for detecting in first field with the presence or absence of cookie information.
Extraction module 3202, if detecting in first field for the detection module 3201 there are cookie information, Then cookie information is extracted from first field.
The extraction module 3202 is not present in first field if being also used to the detection module 3201 and detecting Cookie information then extracts cookie information from second field.
The extraction unit further include: generation module 3203.
Generation module 3203, for generating the corresponding identification information of the cookie information.
The configuration unit 33 is specifically used for the cookie information and the corresponding identification information of the cookie information It is allocated to preset variable.
Second field is used to save the cookie information that server is sent to client and cookie information is corresponding Identification information.
The extraction module 3202 is not present if detecting in first field specifically for the detection module 3201 Cookie information then extracts cookie information from second field.
The configuration unit 33 is specifically also used to the cookie information and the corresponding mark letter of the cookie information Breath is allocated to preset variable.
Described device further include: setting unit 35.
Setting unit 35, for preset variable to be arranged, wherein the preset variable is for saving cookie information.
The Installation practice is corresponding with preceding method embodiment, and to be easy to read, present apparatus embodiment is no longer to aforementioned side Detail content in method embodiment is repeated one by one, it should be understood that the device in the present embodiment can correspond to realize it is aforementioned Full content in embodiment of the method.
A kind of resolver of log information provided by the invention.When receiving log information recording instruction, from access The first field and the second field are obtained in log information, wherein first field is for saving user end to server transmission Cookie information, second field is for saving the cookie information that server is sent to client;From first word Section extracts cookie information, and/or extracts cookie information from second field;The cookie information is allocated to preset Variable and by the preset variable save into log information, the preset variable is for parsing the log information. With in record log information, cookie information is directly recorded in the way of server configuration field at present, that is, pass through two Field records that server is sent to the cookie information of browser and browser is sent to the cookie information phase of server respectively Than the present invention records cookie information by preset variable, can be realized when parsing to log information, from preset variable In can obtain cookie information, the step of so as to simplify log information parsing, and then be able to ascend log information solution The efficiency of analysis.
The resolver of the log information includes processor and memory, and above-mentioned acquiring unit, extraction unit, configuration are single Member, storage unit and setting unit etc. store in memory as program unit, are stored in memory by processor execution In above procedure unit realize corresponding function.
Include kernel in processor, is gone in memory to transfer corresponding program unit by kernel.Kernel can be set one Or more, the mode of current record log information is solved by adjusting kernel parameter, will lead to the efficiency of log information parsing Lower problem.
Memory may include the non-volatile memory in computer-readable medium, random access memory (RAM) and/ Or the forms such as Nonvolatile memory, such as read-only memory (ROM) or flash memory (flashRAM), memory includes at least one storage Chip.
Present invention also provides a kind of computer program products, when executing on data processing equipment, are adapted for carrying out just The program code of beginningization there are as below methods step:
When receiving log information recording instruction, the first field and the second field are obtained from access log information, In, first field is used to save the cookie information of user end to server transmission, and second field is for saving clothes The cookie information that business device is sent to client;
Cookie information is extracted from first field, and/or
Cookie information is extracted from second field;
The cookie information is allocated to preset variable and by the preset variable save into log information, it is described pre- Variable is set for parsing to the log information.
It should be understood by those skilled in the art that, embodiments herein can provide as method, system or computer program Product.Therefore, complete hardware embodiment, complete software embodiment or reality combining software and hardware aspects can be used in the application Apply the form of example.Moreover, it wherein includes the computer of computer usable program code that the application, which can be used in one or more, The computer program implemented in usable storage medium (including but not limited to magnetic disk storage, CD-ROM, optical memory etc.) produces The form of product.
The application is referring to method, the process of equipment (system) and computer program product according to the embodiment of the present application Figure and/or block diagram describe.It should be understood that every one stream in flowchart and/or the block diagram can be realized by computer program instructions The combination of process and/or box in journey and/or box and flowchart and/or the block diagram.It can provide these computer programs Instruct the processor of general purpose computer, special purpose computer, Embedded Processor or other programmable data processing devices to produce A raw machine, so that being generated by the instruction that computer or the processor of other programmable data processing devices execute for real The device for the function of being specified in present one or more flows of the flowchart and/or one or more blocks of the block diagram.
These computer program instructions, which may also be stored in, is able to guide computer or other programmable data processing devices with spy Determine in the computer-readable memory that mode works, so that it includes referring to that instruction stored in the computer readable memory, which generates, Enable the manufacture of device, the command device realize in one box of one or more flows of the flowchart and/or block diagram or The function of being specified in multiple boxes.
These computer program instructions also can be loaded onto a computer or other programmable data processing device, so that counting Series of operation steps are executed on calculation machine or other programmable devices to generate computer implemented processing, thus in computer or The instruction executed on other programmable devices is provided for realizing in one or more flows of the flowchart and/or block diagram one The step of function of being specified in a box or multiple boxes.
In a typical configuration, calculating equipment includes one or more processors (CPU), input/output interface, net Network interface and memory.
Memory may include the non-volatile memory in computer-readable medium, random access memory (RAM) and/ Or the forms such as Nonvolatile memory, such as read-only memory (ROM) or flash memory (flashRAM).Memory is computer-readable medium Example.
Computer-readable medium includes permanent and non-permanent, removable and non-removable media can be by any method Or technology come realize information store.Information can be computer readable instructions, data structure, the module of program or other data. The example of the storage medium of computer includes, but are not limited to phase change memory (PRAM), static random access memory (SRAM), moves State random access memory (DRAM), other kinds of random access memory (RAM), read-only memory (ROM), electric erasable Programmable read only memory (EEPROM), flash memory or other memory techniques, read-only disc read only memory (CD-ROM) (CD-ROM), Digital versatile disc (DVD) or other optical storage, magnetic cassettes, tape magnetic disk storage or other magnetic storage devices Or any other non-transmission medium, can be used for storage can be accessed by a computing device information.As defined in this article, it calculates Machine readable medium does not include temporary computer readable media (transitory media), such as the data-signal and carrier wave of modulation.
The above is only embodiments herein, are not intended to limit this application.To those skilled in the art, Various changes and changes are possible in this application.It is all within the spirit and principles of the present application made by any modification, equivalent replacement, Improve etc., it should be included within the scope of the claims of this application.

Claims (12)

1. a kind of analytic method of log information characterized by comprising
When receiving log information recording instruction, the first field and the second field are obtained from access log information, wherein institute State the first field for save user end to server transmission cookie information, second field for save server to The cookie information that client is sent;
Cookie information is extracted from first field, and/or
Cookie information is extracted from second field;
The cookie information is allocated to preset variable and by the preset variable save into log information, the preset change Amount is for parsing the log information.
2. the analytic method of log information according to claim 1, which is characterized in that described to be extracted from first field Cookie information, and/or extract cookie information from second field and include:
It detects in first field with the presence or absence of cookie information;
If it exists, then cookie information is extracted from first field;
If it does not exist, then cookie information is extracted from second field.
3. the analytic method of log information according to claim 2, which is characterized in that it is described if it exists, then from described One field is extracted after cookie information, further includes:
Generate the corresponding identification information of the cookie information;
It is described the cookie information is allocated to preset variable to include:
The cookie information and the corresponding identification information of the cookie information are allocated to preset variable.
4. the analytic method of log information according to claim 2, which is characterized in that second field is for saving clothes The cookie information that is sent to client of business device and the corresponding identification information of cookie information, it is described if it does not exist, then from described Second field extracts cookie information
If it does not exist, then cookie information and the corresponding identification information of cookie information are extracted from second field;
It is described the cookie information is allocated to preset variable to include:
The cookie information and the corresponding identification information of the cookie information are allocated to preset variable.
5. the analytic method of log information according to claim 1, which is characterized in that described to receive log information note When record instruction, before obtaining the first field and the second field in log information, further includes:
Preset variable is set, wherein the preset variable is for saving cookie information.
6. a kind of resolver of log information characterized by comprising
Acquiring unit, for obtaining the first field and the from access log information when receiving log information recording instruction Two fields, wherein first field is used to save the cookie information of user end to server transmission, and second field is used In the cookie information that preservation server is sent to client;
Extraction unit is used to extract cookie information from first field, and/or
Cookie information is extracted from second field;
Configuration unit, for the cookie information to be allocated to preset variable;
Storage unit, for, into log information, the preset variable to be used to believe the log by the preset variable save Breath is parsed.
7. the resolver of log information according to claim 6, which is characterized in that the extraction unit includes:
Detection module, for detecting in first field with the presence or absence of cookie information;
Extraction module, if detecting in first field for the detection module, there are cookie informations, from described first Field extracts cookie information;
Cookie information is not present if being also used to the detection module and detecting in the extraction module in first field, from Second field extracts cookie information.
8. the resolver of log information according to claim 6, which is characterized in that the extraction unit further include: raw At module,
The generation module, for generating the corresponding identification information of the cookie information;
The configuration unit, specifically for the cookie information and the corresponding identification information of the cookie information to be allocated to Preset variable.
9. the resolver of log information according to claim 7, which is characterized in that second field is for saving clothes The cookie information and the corresponding identification information of cookie information that business device is sent to client,
Cookie information is not present if being specifically used for the detection module and detecting in the extraction module in first field, Cookie information is extracted from second field;
The configuration unit is specifically also used to the cookie information and the corresponding identification information configuration of the cookie information To preset variable.
10. the resolver of log information according to claim 6, which is characterized in that described device further include:
Setting unit, for preset variable to be arranged, wherein the preset variable is for saving cookie information.
11. a kind of storage medium, which is characterized in that the storage medium includes the program of storage, wherein run in described program When control the storage medium where equipment perform claim require 1 to the log information described in any one of claim 5 Analytic method.
12. a kind of processor, which is characterized in that the processor is for running program, wherein right of execution when described program is run Benefit require 1 to the log information described in any one of claim 5 analytic method.
CN201510728082.6A 2015-10-30 2015-10-30 The analysis method and device of log information Active CN106657184B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201510728082.6A CN106657184B (en) 2015-10-30 2015-10-30 The analysis method and device of log information

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201510728082.6A CN106657184B (en) 2015-10-30 2015-10-30 The analysis method and device of log information

Publications (2)

Publication Number Publication Date
CN106657184A CN106657184A (en) 2017-05-10
CN106657184B true CN106657184B (en) 2019-09-24

Family

ID=58810286

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201510728082.6A Active CN106657184B (en) 2015-10-30 2015-10-30 The analysis method and device of log information

Country Status (1)

Country Link
CN (1) CN106657184B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110874433A (en) * 2018-08-30 2020-03-10 北京京东尚科信息技术有限公司 Information processing method and system, computer system and computer readable medium

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102158493A (en) * 2011-04-15 2011-08-17 奇智软件(北京)有限公司 Cookie analyzing method, device thereof and client
CN103067198A (en) * 2012-12-14 2013-04-24 北京集奥聚合科技有限公司 Method and system related to Cookie identity (ID) of user
CN103970843A (en) * 2014-04-28 2014-08-06 东华大学 Conversation combining method based on UUID in Web log preprocessing

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2008269300A (en) * 2007-04-20 2008-11-06 Hitachi Ltd Computer system, intermediate node and log management method

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102158493A (en) * 2011-04-15 2011-08-17 奇智软件(北京)有限公司 Cookie analyzing method, device thereof and client
CN103067198A (en) * 2012-12-14 2013-04-24 北京集奥聚合科技有限公司 Method and system related to Cookie identity (ID) of user
CN103970843A (en) * 2014-04-28 2014-08-06 东华大学 Conversation combining method based on UUID in Web log preprocessing

Also Published As

Publication number Publication date
CN106657184A (en) 2017-05-10

Similar Documents

Publication Publication Date Title
US10567407B2 (en) Method and system for detecting malicious web addresses
US10089384B2 (en) Machine learning-derived universal connector
CN103888490B (en) A kind of man-machine knowledge method for distinguishing of full automatic WEB client side
US20170075932A1 (en) Log storage optimization
CN106202235B (en) Data processing method and device
US10362086B2 (en) Method and system for automating submission of issue reports
CN102546668B (en) Method, device and system for counting unique visitors
CN114417197A (en) Access record processing method and device and storage medium
US10805327B1 (en) Spatial cosine similarity based anomaly detection
CN104268082A (en) Pressure test method and pressure test device for browser
CN107147645B (en) Method and device for acquiring network security data
CN106649342A (en) Data processing method and apparatus in data acquisition platform
CN110110516A (en) Log recording method, apparatus and system
CN114528269A (en) Method, electronic device and computer program product for processing data
CN105138675A (en) Database auditing method and device
CN112235262A (en) Message analysis method and device, electronic equipment and computer readable storage medium
CN112286815A (en) Interface test script generation method and related equipment thereof
EP1696339A2 (en) System and method for testing data format using targeted variant input
CN106657184B (en) The analysis method and device of log information
CN109587198B (en) Image-text information pushing method and device
CN110889065B (en) Page stay time determination method, device and equipment
CN111209266A (en) Auditing method and device based on Redis database and electronic equipment
CN110633432A (en) Method, device, terminal equipment and medium for acquiring data
CN102694802B (en) Network access information recording method and device
US11556649B2 (en) Methods and apparatus to facilitate malware detection using compressed data

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
CB02 Change of applicant information
CB02 Change of applicant information

Address after: 100083 No. 401, 4th Floor, Haitai Building, 229 North Fourth Ring Road, Haidian District, Beijing

Applicant after: Beijing Guoshuang Technology Co.,Ltd.

Address before: 100086 Cuigong Hotel, 76 Zhichun Road, Shuangyushu District, Haidian District, Beijing

Applicant before: Beijing Guoshuang Technology Co.,Ltd.

GR01 Patent grant
GR01 Patent grant