US 12,393,567 B2
Logfile collection and consolidation
Boaz Shuster, Kfar Saba (IL)
Assigned to Red Hat, Inc., Raleigh, NC (US)
Filed by Red Hat, Inc., Raleigh, NC (US)
Filed on Nov. 22, 2021, as Appl. No. 17/532,023.
Application 17/532,023 is a continuation of application No. 15/202,986, filed on Jul. 6, 2016, granted, now 11,188,513.
Prior Publication US 2022/0075769 A1, Mar. 10, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 16/23 (2019.01); G06F 16/18 (2019.01); G06F 16/182 (2019.01); H04L 43/0817 (2022.01)
CPC G06F 16/2322 (2019.01) [G06F 16/1805 (2019.01); G06F 16/2358 (2019.01); G06F 16/182 (2019.01); H04L 43/0817 (2013.01)] 13 Claims
OG exemplary drawing
 
1. A method for consolidating logfile contents from remote computing devices, comprising:
establishing, by a computing device comprising a processor device via a network, connections with a plurality of remote computing devices, each remote computing device having a corresponding logfile comprising information that the remote computing device is configured to store in the corresponding logfile; and
for a plurality of iterations, by the computing device via the network:
for each remote computing device, accessing logfile meta data that identifies attributes of the corresponding logfile, the logfile meta data being separate from data stored in the corresponding logfile, wherein the logfile meta data comprises inode data indicative of whether the corresponding logfile was previously accessed; and
for each remote computing device, based on the inode data indicative of whether the corresponding logfile was accessed, retrieving at least a portion of logfile contents from the corresponding logfile, wherein retrieving the at least the portion of the logfile contents comprises:
determining whether a first inode value of the inode data that identifies an inode at a time T1 and that refers to the corresponding logfile is different from a second inode value of the inode data that identifies the inode at a time T2;
based on the first inode value being different from the second inode value, determining that the logfile was previously accessed and that the logfile has an old logfile status;
retrieving the at least the portion of the logfile contents of the logfile that have been added to the logfile since the logfile was previously accessed; and
sending the at least the portion of the logfile contents to a centralized monitoring service.