US 11,921,571 B2
Method to efficiently evaluate a log pattern
Serverius Petrus Paulus Pronk, Vught (NL); Johannes Henricus Maria Korst, Eindhoven (NL); and Mauro Barbieri, Eindhoven (NL)
Assigned to KONINKLIJKE PHILIPS N.V., Eindhoven (NL)
Appl. No. 17/293,059
Filed by KONINKLIJKE PHILIPS N.V., Eindhoven (NL)
PCT Filed Dec. 19, 2019, PCT No. PCT/EP2019/086209
§ 371(c)(1), (2) Date May 12, 2021,
PCT Pub. No. WO2020/127663, PCT Pub. Date Jun. 25, 2020.
Claims priority of provisional application 62/782,381, filed on Dec. 20, 2018.
Prior Publication US 2021/0397499 A1, Dec. 23, 2021
Int. Cl. G06F 11/07 (2006.01); G06F 11/30 (2006.01); G06F 11/32 (2006.01)
CPC G06F 11/079 (2013.01) [G06F 11/0706 (2013.01); G06F 11/0775 (2013.01); G06F 11/0784 (2013.01); G06F 11/3003 (2013.01); G06F 11/3013 (2013.01); G06F 11/3075 (2013.01); G06F 11/3082 (2013.01); G06F 11/321 (2013.01); G06F 2201/835 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A non-transitory computer-readable medium storing instructions readable and executable by at least one electronic processor to perform a log pattern analysis method by applying a log pattern to log data undergoing analysis comprising log events which are time stamped and which are defined by values for a set of fields, wherein the log data undergoing analysis are stored on a server accessible by the at least one electronic processor via an electronic network, the log pattern analysis method comprising:
constructing a retrieval query to select log events that are in a time interval and that also satisfy at least one additional constraint associated with the log pattern and defined on one or more filter fields of the set of fields;
downloading a sub-set of the log data undergoing analysis from the server to the at least one electronic processor via the electronic network, wherein the sub-set is selected from the log data undergoing analysis by the retrieval query;
applying the log pattern to the downloaded sub-set of the log data undergoing analysis to identify log pattern hits in the log data undergoing analysis; and
controlling a display screen to display a report of the log pattern hits in the log data undergoing analysis.