| CPC G06F 16/122 (2019.01) [G06F 16/1724 (2019.01)] | 20 Claims |
|
1. A system comprising:
one or more processors; and
a non-transitory computer readable medium storing a plurality of instructions, which when executed, cause the one or more processors to:
retrieve, by an analyzer application, a core file dump for a filesystem application in response to an unexpected behavior exhibited by the filesystem application, the analyzer application executing on the same system as the filesystem application;
identify, by the analyzer application, an actively running thread, from a plurality of threads, at a time the core file dump was generated, each thread utilizing one or more sub-components of the filesystem application;
apply one or more thread relationship rules to the one or more sub-components of the actively running thread to identify a plurality of related threads to the actively running thread, the thread relationship rules adding a thread to a list of the related threads when the thread uses a common resource with the one or more sub-components of the actively running thread;
determine a relevance factor for each of the sub-components utilized by the actively running thread and the list of related threads, the relevance factor for each sub-component being determined based on a position of threads referencing each sub-component within a hierarchical tree generated from the actively running thread and the list of related threads; and
generate a support file bundle including selected logs from the sub-components utilized by threads in the hierarchical tree, the selection being based on the relevance factors of the sub-components and the file sizes of the selected logs fitting within a predetermined bundle size.
|