CN112887114A - Log information processing method and device - Google Patents
Log information processing method and device Download PDFInfo
- Publication number
- CN112887114A CN112887114A CN201911204452.0A CN201911204452A CN112887114A CN 112887114 A CN112887114 A CN 112887114A CN 201911204452 A CN201911204452 A CN 201911204452A CN 112887114 A CN112887114 A CN 112887114A
- Authority
- CN
- China
- Prior art keywords
- log
- instruction
- preset
- information
- user
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 230000010365 information processing Effects 0.000 title claims abstract description 23
- 238000003672 processing method Methods 0.000 title claims abstract description 17
- 238000000034 method Methods 0.000 claims abstract description 63
- 230000008569 process Effects 0.000 claims abstract description 40
- 230000004044 response Effects 0.000 claims abstract description 26
- 238000004590 computer program Methods 0.000 claims description 10
- 239000002699 waste material Substances 0.000 abstract description 3
- 238000010586 diagram Methods 0.000 description 11
- 238000000605 extraction Methods 0.000 description 10
- 238000004891 communication Methods 0.000 description 6
- 230000006870 function Effects 0.000 description 6
- 230000015654 memory Effects 0.000 description 6
- 238000012544 monitoring process Methods 0.000 description 5
- 230000002159 abnormal effect Effects 0.000 description 4
- 230000003287 optical effect Effects 0.000 description 4
- 230000005856 abnormality Effects 0.000 description 2
- 239000000835 fiber Substances 0.000 description 2
- 230000003993 interaction Effects 0.000 description 2
- 230000000644 propagated effect Effects 0.000 description 2
- 239000004065 semiconductor Substances 0.000 description 2
- 230000006978 adaptation Effects 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 238000012512 characterization method Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 239000000284 extract Substances 0.000 description 1
- 239000004973 liquid crystal related substance Substances 0.000 description 1
- 238000007726 management method Methods 0.000 description 1
- 239000013307 optical fiber Substances 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/069—Management of faults, events, alarms or notifications using logs of notifications; Post-processing of notifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
- H04N21/24—Monitoring of processes or resources, e.g. monitoring of server load, available bandwidth, upstream requests
Landscapes
- Engineering & Computer Science (AREA)
- Signal Processing (AREA)
- Multimedia (AREA)
- Computer Networks & Wireless Communication (AREA)
- Debugging And Monitoring (AREA)
Abstract
The embodiment of the application discloses a log information processing method and device, and relates to the field of cloud computing. One embodiment of the method comprises: acquiring log information generated by a service process and a preset log processing instruction of a user; determining whether a preset log processing instruction of a user corresponding to the log information exists in the preset log processing instruction based on the log information; and executing a preset log processing instruction in response to determining that the preset log processing instruction of the user corresponding to the log information exists. Enterprise users can flexibly configure preset log processing instructions according to self requirements. Furthermore, only the log information of the user matched with each preset log processing instruction can be correspondingly processed, so that the waste of computing resources possibly caused by executing the preset log processing instruction on all the log information is avoided.
Description
Technical Field
The embodiment of the application relates to the technical field of computers, in particular to a log information processing method and device.
Background
In the existing live broadcast system, a live broadcast system provider usually only collects, transmits and analyzes logs in the live broadcast system for fault location and system tuning of self-service, and does not distribute log data to related enterprise users for realizing self-service monitoring and statistics of the enterprise users, so that adaptation to different enterprise users is not flexible, and personalized monitoring and statistics requirements of the users cannot be met.
Disclosure of Invention
The embodiment of the application provides a log information processing method and device.
In a first aspect, an embodiment of the present application provides a log information processing method, where the method includes: acquiring log information generated by a service process and a preset log processing instruction of a user; determining whether a preset log processing instruction of a user corresponding to the log information exists in the preset log processing instruction based on the log information; and executing a preset log processing instruction in response to determining that the preset log processing instruction of the user corresponding to the log information exists.
In some embodiments, the determining, based on the log information, whether there is a preset log processing instruction of the user corresponding to the log information in the preset log processing instruction includes: acquiring log domain name information in the log information; acquiring instruction domain name information in a preset log processing instruction; and determining whether a preset log processing instruction of the user corresponding to the log information exists in the preset log processing instruction or not according to a matching result between the log domain name information and the instruction domain name information.
In some embodiments, the preset log processing instruction is a log forwarding instruction; the executing, in response to determining that there is a preset log processing instruction of the user corresponding to the log information, the preset log processing instruction includes: in response to determining that a log forwarding instruction of a user corresponding to the log information exists, extracting keywords in the log information according to the log forwarding instruction; and sending the log information of the associated keywords to a receiving end appointed by the log forwarding instruction.
In some embodiments, the receiving end includes at least one of: the method comprises the steps of presetting a user service process, presetting a user message queue, a log counting node and a log retrieval node, wherein the log counting node is a log counting node for carrying out log counting according to user requirements, and the log retrieval node is a log retrieval node for carrying out log storage and retrieval according to the user requirements.
In some embodiments, the log processing instruction is preset as a log alarm instruction; the executing, in response to determining that there is a preset log processing instruction of the user corresponding to the log information, the preset log processing instruction includes: in response to determining that a log alarm instruction of a user corresponding to the log information exists, extracting keywords in the log information according to the log alarm instruction; and responding to the fact that the number of the log information of the associated keywords exceeds a preset alarm threshold value in a preset time period, sending the log information of the associated keywords to a user corresponding to the log information, and sending alarm information to the user.
In a second aspect, an embodiment of the present application provides a log information processing apparatus, where the apparatus includes: an information acquisition unit configured to acquire log information generated by a service process and a preset log processing instruction of a user; an instruction determining unit configured to determine whether a preset log processing instruction of a user corresponding to the log information exists in the preset log processing instruction based on the log information; an instruction execution unit configured to execute a preset log processing instruction in response to determining that there is a preset log processing instruction of a user corresponding to the log information.
In some embodiments, the instruction determination unit is further configured to: acquiring log domain name information in the log information; acquiring instruction domain name information in a preset log processing instruction; and determining whether a preset log processing instruction of the user corresponding to the log information exists in the preset log processing instruction or not according to a matching result between the log domain name information and the instruction domain name information.
In some embodiments, the preset log processing instruction is a log forwarding instruction; an instruction execution unit further configured to: in response to determining that a log forwarding instruction of a user corresponding to the log information exists, extracting keywords in the log information according to the log forwarding instruction; and sending the log information of the associated keywords to a receiving end appointed by the log forwarding instruction.
In some embodiments, the receiving end comprises at least one of: the method comprises the steps of presetting a user service process, presetting a user message queue, a log counting node and a log retrieval node, wherein the log counting node is a log counting node for carrying out log counting according to user requirements, and the log retrieval node is a log retrieval node for carrying out log storage and retrieval according to the user requirements.
In some embodiments, the log processing instruction is preset as a log alarm instruction; an instruction execution unit further configured to: in response to determining that a log alarm instruction of a user corresponding to the log information exists, extracting keywords in the log information according to the log alarm instruction; and responding to the fact that the number of the log information of the associated keywords exceeds a preset alarm threshold value in a preset time period, sending the log information of the associated keywords to a user corresponding to the log information, and sending alarm information to the user.
In a third aspect, the present application provides a computer-readable medium, on which a computer program is stored, where the program, when executed by a processor, implements the method as described in any implementation manner of the first aspect.
In a fourth aspect, an embodiment of the present application provides an electronic device, including: one or more processors; a storage device having one or more programs stored thereon, which when executed by one or more processors, cause the one or more processors to implement a method as described in any implementation of the first aspect.
According to the log information processing method and device provided by the embodiment of the application, firstly, log information generated by a service process and a preset log processing instruction of a user are obtained; then, determining whether a preset log processing instruction of a user corresponding to the log information exists in the preset log processing instruction based on the log information; then, in response to determining that there is a preset log processing instruction of the user corresponding to the log information, the preset log processing instruction is executed. Enterprise users can flexibly configure preset log processing instructions according to self requirements. Furthermore, only the log information of the user matched with each preset log processing instruction can be correspondingly processed, so that the waste of computing resources possibly caused by executing the preset log processing instruction on all the log information is avoided.
Drawings
Other features, objects and advantages of the present application will become more apparent upon reading of the following detailed description of non-limiting embodiments thereof, made with reference to the accompanying drawings in which:
FIG. 1 is an exemplary system architecture diagram in which one embodiment of the present application may be applied;
FIG. 2 is a flow diagram of one embodiment of a log information processing method according to the present application;
fig. 3 is a schematic diagram of an application scenario of the log information processing method according to the present embodiment;
FIG. 4 is a flow diagram of yet another embodiment of a log information processing method according to the present application;
FIG. 5 is a block diagram of one embodiment of a log information processing apparatus according to the present application;
FIG. 6 is a block diagram of a computer system suitable for use in implementing embodiments of the present application.
Detailed Description
The present application will be described in further detail with reference to the following drawings and examples. It is to be understood that the specific embodiments described herein are merely illustrative of the relevant invention and not restrictive of the invention. It should be noted that, for convenience of description, only the portions related to the related invention are shown in the drawings.
It should be noted that the embodiments and features of the embodiments in the present application may be combined with each other without conflict. The present application will be described in detail below with reference to the embodiments with reference to the attached drawings.
Fig. 1 shows an exemplary architecture 100 to which the log information processing method and apparatus of the present application may be applied.
As shown in fig. 1, the system architecture 100 may include terminal devices 101, 102, 103, a network 104, and a server 105. The network 104 serves as a medium for providing communication links between the terminal devices 101, 102, 103 and the server 105. Network 104 may include various connection types, such as wired, wireless communication links, or fiber optic cables, to name a few.
The terminal devices 101, 102, 103 may be hardware devices or software that support network connectivity for image data acquisition and data interaction. When the terminal devices 101, 102, and 103 are hardware, they may be various electronic devices supporting video recording, information interaction, network connection, and the like, including but not limited to smart phones, tablet computers, e-book readers, laptop portable computers, desktop computers, and the like. When the terminal apparatuses 101, 102, 103 are software, they can be installed in the electronic apparatuses listed above. It may be implemented, for example, as multiple software or software modules to provide distributed services, or as a single software or software module. And is not particularly limited herein.
The server 105 may be a server that provides various services, such as a server that provides live services to the terminal apparatuses 101, 102, 103. The server can store and process various received data and feed back the processing result to the terminal equipment.
It should be noted that the log information processing method provided by the embodiment of the present disclosure may be executed by the server 105. Accordingly, the log information processing means may be provided in the server 105.
The server may be hardware or software. When the server is hardware, it may be implemented as a distributed server cluster formed by multiple servers, or may be implemented as a single server. When the server is software, it may be implemented as multiple pieces of software or software modules, for example, to provide distributed services, or as a single piece of software or software module. And is not particularly limited herein.
It should be understood that the number of storage devices and servers in FIG. 1 is merely illustrative. There may be any number of terminal devices and servers, as desired for implementation.
With continuing reference to FIG. 2, a flow 200 of one embodiment of a log information processing method according to the present application is shown, comprising the steps of:
In this embodiment, the service process may be a service process in various systems, including but not limited to a live system, a cloud system, a shopping system, and the like. Accordingly, the user is a user who uses the above various systems. The user can set a preset log processing instruction according to the monitoring and statistical requirements of the service of the user. The method comprises the steps that a system provider acquires log information generated by a service process and a preset log processing instruction of a user in the process of providing service for the user.
Taking the live broadcast system as an example, the log information includes log information generated by the service process of the edge node and log information generated by the service process of the center node in the live broadcast system. The edge node may be, for example, a node directly facing the user and responsible for providing live content service to the user, and has better response capability and connection speed for the end access user. The central node may be, for example, a node in the live system responsible for global management and control.
In a live broadcast system, when a user watches videos, a mobile terminal of the user firstly checks whether a local cache is overdue; if the local cache is detected to be expired, a mobile terminal of a user initiates a request to an edge node of a Content Delivery Network (CDN), and the edge node detects whether the cache of user request data is expired; if the cache of the user request data is not overdue, directly responding to the user request, and transmitting the requested data to the mobile terminal of the user by the edge node; if the cache of the user requested data has expired, the edge node also needs to send a back to the source request to the central node to obtain the user requested data.
In this embodiment, in order to avoid the influence of the storage log information on the memories of the edge node and the central node, the execution main body (for example, the server in fig. 1) may directly collect the log information generated by the edge node and the central node in the live broadcast system through the log collection process.
In this embodiment, the preset log processing instruction is a log processing instruction set by a user of each live broadcast system according to a monitoring or statistical requirement of the user on log information generated by the user, the same user may set a plurality of preset log processing instructions according to the requirement of the user, and the preset log processing instruction may be changed or added at any time according to a change of the requirement of the user when the live broadcast system provides a service to the user.
The preset log processing instruction comprises an extraction part and an instruction part, wherein the extraction part is used for representing key information in log information concerned by a user, and the instruction part is used for representing forwarding processing information of the log information.
In some optional implementations, the execution body provides a preset extraction field set to the user, where the extraction field set is a field set supported by the execution body and capable of extracting corresponding key information in the log information according to the extraction field. And the user can select the extraction field of the extraction field set according to the requirement of the user so as to finish the extraction part of the preset log processing instruction.
In some optional implementation manners, the execution main body obtains log information generated by a service process of the live broadcast system in real time, obtains a preset log processing instruction of a user in an instant messaging manner, so as to ensure that the preset log processing instruction of the user is obtained, and processes the log information according to the preset log processing instruction.
In this embodiment, the execution main body analyzes each piece of acquired log information, and determines whether a preset log processing instruction of a user corresponding to the log information exists in the acquired preset log processing instruction according to user identification information in the analyzed log information and user identification information of the preset log processing instruction.
In some optional implementations, based on the log information, it may be further determined whether there is a preset log processing instruction of the user corresponding to the log information in the preset log processing instruction by: firstly, acquiring log domain name information in log information; then, acquiring instruction domain name information in a preset log processing instruction; and then, according to the matching result between the log domain name information and the instruction domain name information, determining whether a preset log processing instruction of the user corresponding to the log information exists in the preset log processing instruction. When the log domain name information is matched with the instruction domain name information, the preset log processing instruction of the user corresponding to the log information exists in the preset log processing instruction; otherwise, the preset log processing instruction of the user corresponding to the log information does not exist in the preset log processing instruction. Therefore, the execution main body can quickly and accurately determine whether the preset log processing instruction of the user corresponding to the log information exists in the preset log processing instruction or not according to the matching result of the log domain name information and the instruction domain name information, and the execution efficiency of the preset log processing instruction is improved.
In this embodiment, in response to determining that there is a preset log processing instruction of the user corresponding to the log information, the execution main body executes the preset log processing instruction to process the log information according to the user requirement represented by the preset log processing instruction.
In some optional implementation manners, the log processing instruction is preset as a log forwarding instruction for performing log forwarding; the execution main body responds to the log forwarding instruction of the user corresponding to the log information and extracts the keywords in the log information according to the extraction part of the log forwarding instruction; keywords in the log information are associated with the log information; and then, sending the log information of the associated keywords to a receiving end specified by the log forwarding instruction.
Wherein, the receiving end includes but is not limited to: the method comprises the steps of presetting a user service process, presetting a user message queue, a log statistic node and a log retrieval node. The preset user service process is a service process of a user side, after receiving the log information, the preset user service process can further classify and process the log information according to keywords of the log information, also can sort the log information according to time, and can monitor operation parameters or predict abnormal conditions according to changes of log contents; the user can view and store the log information through the service process. When the log forwarding instruction is used to forward the log information to the service process of the user, the instruction part of the log forwarding instruction includes an IP (Internet Protocol Address) and a port list corresponding to the service process of the user.
The pre-set user message queue is the message queue information used by the user, such as kafka (open source streaming platform) message queue. After the log information is forwarded to the message queue, the message queue is responsible for receiving, storing and forwarding the log information, and the user can take out and process the log information from the message queue.
The log statistic node is a log statistic node for performing log statistics according to user requirements, and the log statistic node can perform data statistics based on log information according to indication information of a user, such as access peak period statistics, audience geographical region statistics and the like. The log retrieval node is used for storing and retrieving logs according to user requirements, and a user can input corresponding keywords and retrieve logs in a retrieval mode.
In this embodiment, the enterprise user can flexibly configure the preset log processing instruction according to the own requirement. Furthermore, only the log information of the user matched with each preset log processing instruction can be correspondingly processed, so that the waste of computing resources possibly caused by executing the preset log processing instruction on all the log information is avoided.
Fig. 3 schematically shows one application scenario of the log information processing method according to the present embodiment. The live system provider 301 provides live services to a wide variety of users, including user 302, user 303, and user 304. In the process of providing live broadcast service for users, a server of the live broadcast system provider 301 obtains log information generated in a service process of the live broadcast system and preset log processing instructions of the users in real time. The server of the live broadcast system provider 301 determines that the preset log processing instructions of the user 302, the user 303 and the user 304 corresponding to the log information exist in the obtained preset log processing instructions according to the obtained log information. For the log information of the user 302, the server of the live broadcast system provider 301 performs forwarding processing according to a preset log processing instruction of the user 302; for the log information of the user 303, the server of the live broadcast system provider 301 performs forwarding processing according to a preset log processing instruction of the user 303; for the log information of the user 304, the server of the live broadcast system provider 301 performs alarm processing according to a preset log processing instruction of the user 304 and sends alarm information.
With continuing reference to FIG. 4, an exemplary flow 400 of another embodiment of a log information processing method according to the present application is shown, comprising the steps of:
In this embodiment, step 401 is performed in a manner similar to step 201, and is not described herein again.
In this embodiment, step 402 is performed in a manner similar to step 202, and is not described herein again.
In this embodiment, the preset log processing instruction is a log alarm instruction for representing the abnormality of the live broadcast system corresponding to the log information. And when the key words of the corresponding extraction part in the log alarm instruction can be extracted according to the log alarm instruction, the abnormal conditions shown by the key words exist in the live broadcast service of the user corresponding to the log information.
In this embodiment, the log alarm instruction may be a log alarm instruction used for representing different pieces of exception information of the user, including but not limited to exception information of hardware in the live broadcast system, exception information of software in the live broadcast system, and exception information of components in the live broadcast system.
And step 404, in response to that the number of the log information of the associated keywords exceeds a preset alarm threshold value in a preset time period, sending the log information of the associated keywords to a user corresponding to the log information, and sending alarm information to the user.
In this embodiment, the execution main body counts the log information of the keywords associated with the characterization information within a preset time period, and when the number of the log information of the associated keywords exceeds a preset alarm threshold, the execution main body sends alarm information to the user, and simultaneously sends the log information of the associated keywords to the user corresponding to the log information.
In this embodiment, the user can set the preset alarm threshold corresponding to the abnormal condition for different abnormal conditions of the live broadcast system, so that the execution main body can provide alarm information more accurately.
As can be seen from fig. 4, compared with the embodiment corresponding to fig. 2, the flow 400 of the log information processing method in this embodiment specifically illustrates processing log information according to a log alarm instruction of a user, and alarming an abnormality of the log information conforming to the log alarm instruction. Therefore, the execution main body processes the log information according to the log alarm instruction of the user, and the monitoring requirement of the user on the log information is met.
With continuing reference to fig. 5, as an implementation of the method shown in the above figures, the present disclosure provides an embodiment of a log information processing apparatus, which corresponds to the embodiment of the method shown in fig. 2, and which is particularly applicable to various electronic devices.
As shown in fig. 5, the log information processing apparatus includes: an information acquisition unit 501, an instruction determination unit 502, and an instruction execution unit 503.
An information obtaining unit 501 configured to obtain log information generated by a service process and a preset log processing instruction of a user; an instruction determining unit 502 configured to determine whether there is a preset log processing instruction of a user corresponding to the log information among the preset log processing instructions based on the log information; an instruction execution unit 503 configured to execute a preset log processing instruction in response to determining that there is a preset log processing instruction of a user corresponding to the log information.
In some embodiments, the instruction determination unit 502 is further configured to: acquiring log domain name information in the log information; acquiring instruction domain name information in a preset log processing instruction; and determining whether a preset log processing instruction of the user corresponding to the log information exists in the preset log processing instruction or not according to a matching result between the log domain name information and the instruction domain name information.
In some embodiments, the preset log processing instruction is a log forwarding instruction; the instruction execution unit 503 is further configured to: in response to determining that a log forwarding instruction of a user corresponding to the log information exists, extracting keywords in the log information according to the log forwarding instruction; and sending the log information of the associated keywords to a receiving end appointed by the log forwarding instruction.
In some embodiments, the receiving end comprises at least one of: the method comprises the steps of presetting a user service process, presetting a user message queue, a log counting node and a log retrieval node, wherein the log counting node is a log counting node for carrying out log counting according to user requirements, and the log retrieval node is a log retrieval node for carrying out log storage and retrieval according to the user requirements.
In some embodiments, the log processing instruction is preset as a log alarm instruction; the instruction execution unit 503 is further configured to: in response to determining that a log alarm instruction of a user corresponding to the log information exists, extracting keywords in the log information according to the log alarm instruction; responding to the situation that the number of the log information of the associated keywords exceeds a preset alarm threshold value in a preset time period, sending the log information of the associated keywords to a user corresponding to the log information, and sending alarm information to the user
Referring now to FIG. 6, shown is a block diagram of a computer system 600 suitable for use in implementing devices of embodiments of the present application (e.g., devices 101, 102, 103, 105 shown in FIG. 1). The apparatus shown in fig. 6 is only an example, and should not bring any limitation to the function and use range of the embodiments of the present application.
As shown in fig. 6, the computer system 600 includes a processor (e.g., CPU, central processing unit) 601 that can perform various appropriate actions and processes according to a program stored in a Read Only Memory (ROM)602 or a program loaded from a storage section 608 into a Random Access Memory (RAM) 603. In the RAM603, various programs and data necessary for the operation of the system 600 are also stored. The processor 601, the ROM602, and the RAM603 are connected to each other via a bus 604. An input/output (I/O) interface 605 is also connected to bus 604.
The following components are connected to the I/O interface 605: an input portion 606 including a keyboard, a mouse, and the like; an output portion 607 including a display such as a Cathode Ray Tube (CRT), a Liquid Crystal Display (LCD), and the like, and a speaker; a storage section 608 including a hard disk and the like; and a communication section 609 including a network interface card such as a LAN card, a modem, or the like. The communication section 609 performs communication processing via a network such as the internet. The driver 610 is also connected to the I/O interface 605 as needed. A removable medium 611 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, or the like is mounted on the drive 610 as necessary, so that a computer program read out therefrom is mounted in the storage section 608 as necessary.
In particular, according to an embodiment of the present disclosure, the processes described above with reference to the flowcharts may be implemented as computer software programs. For example, embodiments of the present disclosure include a computer program product comprising a computer program embodied on a computer readable medium, the computer program comprising program code for performing the method illustrated in the flow chart. In such an embodiment, the computer program may be downloaded and installed from a network through the communication section 609, and/or installed from the removable medium 611. The computer program, when executed by the processor 601, performs the above-described functions defined in the method of the present application.
It should be noted that the computer readable medium of the present application can be a computer readable signal medium or a computer readable storage medium or any combination of the two. A computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples of the computer readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the present application, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. In this application, however, a computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take many forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device. Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, fiber optic cable, RF, etc., or any suitable combination of the foregoing.
Computer program code for carrying out operations for aspects of the present application may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C + + or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the client computer, partly on the client computer, as a stand-alone software package, partly on the client computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the client computer through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet service provider).
The flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of apparatus, methods and computer program products according to various embodiments of the present application. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.
The units described in the embodiments of the present application may be implemented by software or hardware. The described units may also be provided in a processor, and may be described as: a processor includes an information acquisition unit, an instruction determination unit, and an instruction execution unit. Here, the names of these units do not constitute a limitation on the unit itself in some cases, and for example, the instruction determining unit may also be described as a unit that determines whether or not there is a preset log processing instruction of the user corresponding to the log information among the preset log processing instructions based on the log information.
As another aspect, the present application also provides a computer-readable medium, which may be contained in the apparatus described in the above embodiments; or may be separate and not incorporated into the device. The computer readable medium carries one or more programs which, when executed by the apparatus, cause the computer device to: acquiring log information generated by a service process and a preset log processing instruction of a user; determining whether a preset log processing instruction of a user corresponding to the log information exists in the preset log processing instruction based on the log information; and executing a preset log processing instruction in response to determining that the preset log processing instruction of the user corresponding to the log information exists.
The above description is only a preferred embodiment of the application and is illustrative of the principles of the technology employed. It will be appreciated by those skilled in the art that the scope of the invention herein disclosed is not limited to the particular combination of features described above, but also encompasses other arrangements formed by any combination of the above features or their equivalents without departing from the spirit of the invention. For example, the above features may be replaced with (but not limited to) features having similar functions disclosed in the present application.
Claims (12)
1. A log information processing method, wherein the method comprises:
acquiring log information generated by a service process and a preset log processing instruction of a user;
determining whether a preset log processing instruction of a user corresponding to the log information exists in the preset log processing instruction or not based on the log information;
and executing the preset log processing instruction in response to determining that the preset log processing instruction of the user corresponding to the log information exists.
2. The method of claim 1, wherein the determining whether there is a preset log processing instruction of a user corresponding to the log information in the preset log processing instruction based on the log information comprises:
acquiring log domain name information in the log information;
acquiring instruction domain name information in the preset log processing instruction;
and determining whether a preset log processing instruction of a user corresponding to the log information exists in the preset log processing instruction or not according to a matching result between the log domain name information and the instruction domain name information.
3. The method of claim 1, wherein the preset log processing instruction is a log forwarding instruction;
the executing, in response to determining that there is a preset log processing instruction of a user corresponding to the log information, the preset log processing instruction includes:
in response to determining that a log forwarding instruction of a user corresponding to the log information exists, extracting keywords in the log information according to the log forwarding instruction;
and sending the log information associated with the keywords to a receiving end appointed by the log forwarding instruction.
4. The method of claim 3, wherein,
the receiving end comprises at least one of the following items: the method comprises the steps of presetting a user service process, presetting a user message queue, a log counting node and a log retrieval node, wherein the log counting node is a log counting node for carrying out log counting according to user requirements, and the log retrieval node is a log retrieval node for carrying out log storage and retrieval according to the user requirements.
5. The method of claim 1, wherein the preset log processing instruction is a log alarm instruction;
the executing, in response to determining that there is a preset log processing instruction of a user corresponding to the log information, the preset log processing instruction includes:
in response to determining that a log alarm instruction of a user corresponding to the log information exists, extracting keywords in the log information according to the log alarm instruction;
responding to the situation that the number of the log information associated with the keywords exceeds a preset alarm threshold value in a preset time period, sending the log information associated with the keywords to a user corresponding to the log information, and sending alarm information to the user.
6. A log information processing apparatus, wherein the apparatus comprises:
an information acquisition unit configured to acquire log information generated by a service process and a preset log processing instruction of a user;
an instruction determining unit configured to determine whether there is a preset log processing instruction of a user corresponding to the log information among the preset log processing instructions based on the log information;
an instruction execution unit configured to execute a preset log processing instruction in response to determining that there is the preset log processing instruction of the user corresponding to the log information.
7. The apparatus of claim 6, wherein,
the instruction determination unit further configured to: acquiring log domain name information in the log information; acquiring instruction domain name information in the preset log processing instruction; and determining whether a preset log processing instruction of a user corresponding to the log information exists in the preset log processing instruction or not according to a matching result between the log domain name information and the instruction domain name information.
8. The apparatus of claim 6, wherein the preset log processing instruction is a log forwarding instruction;
the instruction execution unit, further configured to: in response to determining that a log forwarding instruction of a user corresponding to the log information exists, extracting keywords in the log information according to the log forwarding instruction; and sending the log information associated with the keywords to a receiving end appointed by the log forwarding instruction.
9. The apparatus of claim 8, wherein,
the receiving end comprises at least one of the following items: the method comprises the steps of presetting a user service process, presetting a user message queue, a log counting node and a log retrieval node, wherein the log counting node is a log counting node for carrying out log counting according to user requirements, and the log retrieval node is a log retrieval node for carrying out log storage and retrieval according to the user requirements.
10. The apparatus of claim 6, wherein the preset log processing instruction is a log alarm instruction;
the instruction execution unit, further configured to: in response to determining that a log alarm instruction of a user corresponding to the log information exists, extracting keywords in the log information according to the log alarm instruction; responding to the situation that the number of the log information associated with the keywords exceeds a preset alarm threshold value in a preset time period, sending the log information associated with the keywords to a user corresponding to the log information, and sending alarm information to the user.
11. A computer-readable medium, on which a computer program is stored, wherein the program, when executed by a processor, implements the method of any one of claims 1-5.
12. An electronic device, comprising:
one or more processors;
a storage device having one or more programs stored thereon,
when executed by the one or more processors, cause the one or more processors to implement the method of any one of claims 1-5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911204452.0A CN112887114A (en) | 2019-11-29 | 2019-11-29 | Log information processing method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911204452.0A CN112887114A (en) | 2019-11-29 | 2019-11-29 | Log information processing method and device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN112887114A true CN112887114A (en) | 2021-06-01 |
Family
ID=76038882
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201911204452.0A Pending CN112887114A (en) | 2019-11-29 | 2019-11-29 | Log information processing method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112887114A (en) |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106202305A (en) * | 2016-06-30 | 2016-12-07 | 北京北信源软件股份有限公司 | A kind of log processing method, device and Database Systems |
| JP2018097696A (en) * | 2016-12-14 | 2018-06-21 | 富士通株式会社 | Operation log output program, operation log output method, and information processing apparatus |
| CN110019318A (en) * | 2017-09-11 | 2019-07-16 | 阿里巴巴集团控股有限公司 | A kind of log matches processing method, device and electronic equipment |
-
2019
- 2019-11-29 CN CN201911204452.0A patent/CN112887114A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106202305A (en) * | 2016-06-30 | 2016-12-07 | 北京北信源软件股份有限公司 | A kind of log processing method, device and Database Systems |
| JP2018097696A (en) * | 2016-12-14 | 2018-06-21 | 富士通株式会社 | Operation log output program, operation log output method, and information processing apparatus |
| CN110019318A (en) * | 2017-09-11 | 2019-07-16 | 阿里巴巴集团控股有限公司 | A kind of log matches processing method, device and electronic equipment |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107370806B (en) | HTTP status code monitoring method, device, storage medium and electronic equipment | |
| CN108900388B (en) | Method, apparatus, and medium for monitoring network quality | |
| CN110928853A (en) | Method and device for identifying log | |
| CN110928934A (en) | Data processing method and device for business analysis | |
| CN111600772B (en) | Network distribution content detection processing device, method, system and electronic equipment | |
| CN110737726B (en) | Method and device for determining test data of interface to be tested | |
| CN110888985A (en) | Alarm information processing method and device, electronic equipment and storage medium | |
| US10009220B2 (en) | In-vehicle information system and information processing method thereof | |
| CN114091704A (en) | Alarm suppression method and device | |
| US20130198381A1 (en) | Optimizing Data Extraction from Distributed Systems into a Unified Event Aggregator Using Time-Outs | |
| CN114153703A (en) | Micro-service exception positioning method and device, electronic equipment and program product | |
| WO2022041879A1 (en) | Method and apparatus for processing notification trigger message | |
| CN113595886A (en) | Instant messaging message processing method and device, electronic equipment and storage medium | |
| CN112506490A (en) | Interface generation method and device, electronic equipment and storage medium | |
| CN112887114A (en) | Log information processing method and device | |
| CN115202973A (en) | Application running state determining method and device, electronic equipment and medium | |
| CN113779021B (en) | Data processing method, device, computer system and readable storage medium | |
| CN111427878B (en) | Data monitoring alarm method, device, server and storage medium | |
| CN110875856B (en) | Method and apparatus for activation data anomaly detection and analysis | |
| CN113282455A (en) | Monitoring processing method and device | |
| CN113761433A (en) | Service processing method and device | |
| CN112783677A (en) | Method and device for monitoring service abnormity | |
| CN114285743B (en) | Method, device, electronic equipment and storage medium for updating configuration information | |
| CN113114612B (en) | Determination method and device for distributed system call chain | |
| US20240195691A1 (en) | Server configuration anomaly detection |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20210601 |