| 摘要 |
Method and system for classifying system logs. A data processing system reads a message in one line of a system log; prepares a root node of a tree structure in which each node holds a format; calculates a similarity between a log of the root node and the message; generates and stores a first format in the root node if the calculated similarity is equal to or greater than a threshold value; adds the message to a child node of the root node, in accordance with a given condition; searches for, after the first format is created, a second format similar to the first format in a format storage table; combines the first format and the similar format to produce a combined parent format, where the combined parent format holds a plurality of formats; and stores the combined parent format in the format storage table to produce a classified format. |
