We use cookies to improve your experience with our site.
Jia Chen, Peng Wang, Fan Qiao, Shi-Qing Du, Wei Wang. PLQ: An Efficient Approach to Processing Pattern-Based Log Queries[J]. Journal of Computer Science and Technology, 2022, 37(5): 1239-1254. DOI: 10.1007/s11390-020-0653-5
Citation: Jia Chen, Peng Wang, Fan Qiao, Shi-Qing Du, Wei Wang. PLQ: An Efficient Approach to Processing Pattern-Based Log Queries[J]. Journal of Computer Science and Technology, 2022, 37(5): 1239-1254. DOI: 10.1007/s11390-020-0653-5

PLQ: An Efficient Approach to Processing Pattern-Based Log Queries

  • As software systems grow more and more complex, extensive techniques have been proposed to analyze the log data to obtain the insight of the system status. However, during log data analysis, tedious manual efforts are paid to search interesting or informative log patterns from a huge volume of log data, named pattern-based queries. Although existing log management tools and DMBS systems can also support pattern-based queries, they suffer from a low efficiency. To deal with this problem, we propose a novel approach, named PLQ (Pattern-based Log Query). First, PLQ organizes logs into disjoint chunks and builds chunk-wise bitmap indexes for log types and attribute values. Then, based on bitmap indexes, PLQ finds candidate logs with a set of efficient bit-wise operations. Finally, PLQ fetches candidate logs and validates them according to the queried pattern. Extensive experiments are conducted on real-life datasets. According to experimental results, compared with existing log management systems, PLQ is more efficient in querying log patterns and has a higher pruning rate for filtering irrelevant logs. Moreover, in PLQ, since the ratio of the index size to the data size does not exceed 2.5% for log datasets of different sizes, PLQ has a high scalability.
  • loading

Catalog

    /

    DownLoad:  Full-Size Img  PowerPoint
    Return
    Return