Visualization of graphical representations of log files

Abstract

A computer-implemented method includes receiving one or more log files. Each of the one or more log files includes one or more logs. The computer-implemented method further includes extracting one or more event records from said one or more logs. The computer-implemented method further includes, for each event record of the one or more event records, determining one or more attributes and one or more dimensions based on the event record, respectively. The computer-implemented method further includes grouping the one or more event records into one or more attribute groups. The computer-implemented method further includes ordering the one or more event records of each of the one or more attribute groups by the one or more dimensions. The computer-implemented method further includes generating one or more graphical representations of the one or more attribute groups. A corresponding computer system and computer program product are also disclosed.

What is claimed is: 
     
         1 . A computer-implemented method comprising:
 receiving one or more log files, each of said one or more log files comprising one or more logs;   extracting one or more event records from said one or more logs;   for each event record of said one or more event records:
 determining one or more attributes based on said event record; and 
 determining one or more dimensions based on said event record; 
   grouping said one or more event records into one or more attribute groups;   ordering said one or more event records of each said one or more attribute groups by said one or more dimensions; and   generating one or more graphical representations of said one or more attribute groups.   
     
     
         2 . The computer-implemented method of  claim 1 , further comprising normalizing said one or more event records. 
     
     
         3 . The computer-implemented method of  claim 1 , wherein at least one of said one or more graphical representations comprises a scatter plot, said scatter plot displaying data based on at least one of said one or more event records, at least one of said one or more attributes, and at least one of said one or more dimensions. 
     
     
         4 . The computer-implemented method of  claim 3 , wherein said scatter plot identifies at least one pattern event selected from the group consisting of:
 (a) repeated events;   (b) periodical events;   (c) missing events;   (d) abnormal events; and   (e) related events.   
     
     
         5 . The computer-implemented method of  claim 3 , wherein said scatter plot is modified by filtering said one or more event records based on one or more filter criteria. 
     
     
         6 . The computer-implemented method of  claim 1 , wherein at least one of said one or more graphical representations displays details of at least one said one or more event records. 
     
     
         7 . A computer program product, the computer program product comprising one or more computer readable storage media and program instructions stored on said one or more computer readable storage media, said program instructions comprising instructions to:
 receive one or more log files, each of said one or more log files comprising one or more logs;   extract one or more event records from said one or more logs;   for each event record of said one or more event records:
 determine one or more attributes based on said event record; and 
 determine one or more dimensions based on said event record; 
   group said one or more event records into one or more attribute groups;   order said one or more event records of each said one or more attribute groups by said one or more dimensions; and   generate one or more graphical representations of said one or more attribute groups.   
     
     
         8 . The computer program product of  claim 7 , further comprising normalizing said one or more event records. 
     
     
         9 . The computer program product of  claim 7 , wherein at least one of said one or more graphical representations comprises a scatter plot, said scatter plot displaying data based on at least one of said one or more event records, at least one of said one or more attributes, and at least one of said one or more dimensions. 
     
     
         10 . The computer program product of  claim 9 , wherein said scatter plot identifies at least one pattern event selected from the group comprising:
 (a) repeated events;   (b) periodical events;   (c) missing events;   (d) abnormal events; and   (e) related events.   
     
     
         11 . The computer program product of  claim 9 , wherein said scatter plot is modified by filtering said one or more event records based on one or more filter criteria. 
     
     
         12 . The computer program product of  claim 7 , wherein at least one of said one or more graphical representations displays details of at least one of said one or more event records. 
     
     
         13 . A computer system, the computer system comprising:
 one or more computer processors;   one or more computer readable storage media;   computer program instructions;   said computer program instructions being stored on said one or more computer readable storage media;   said computer program instructions comprising instructions to:
 receive one or more log files, each of said one or more log files comprising one or more logs; 
 extract one or more event records from said one or more logs; 
 for each event record of said one or more event records:
 determine one or more attributes based on said event record; and 
 determine one or more dimensions based on said event record; 
 
 group said one or more event records into one or more attribute groups; 
 order said one or more event records of each said one or more attribute groups by said one or more dimensions; and 
 generate one or more graphical representations of said one or more attribute groups. 
   
     
     
         14 . The computer system of  claim 13 , further comprising normalizing said one or more event records. 
     
     
         15 . The computer system of  claim 13 , wherein at least one of said one or more graphical representations comprises a scatter plot, said scatter plot displaying data based on at least one of said one or more event records, at least one of said one or more attributes, and at least one of said one or more dimensions. 
     
     
         16 . The computer system of  claim 15 , wherein said scatter plot identifies at least one pattern event selected from the group comprising:
 (a) repeated events;   (b) periodical events;   (c) missing events;   (d) abnormal events; and   (e) related events.   
     
     
         17 . The computer system of  claim 15 , wherein said scatter plot is modified by filtering said one or more event records based on one or more filter criteria. 
     
     
         18 . The computer system of  claim 13 , wherein at least one of said one or more graphical representations displays details of at least one said one or more event records.