SEARCH FOR INFORMATION RELATED TO AN INCIDENT

摘要

Computer-implemented method for searching for information related to an incident generated in a server system, a system and a computer program product. The method includes extracting context information from a current ticket describing the incident, the context information including a first expression describing a symptom of the incident and indicating at least one component of the server system associated with the symptom; determining a data source which generates data in which the information related to the incident is to be searched for at least according to the at least one component; and using the first expression describing the symptom and a second different expression describing the symptom as keywords to search for the information related to the incident in the data.

主权项

1. A computer-implemented method for use in connection with an incident generated in a server system, the method comprising:
extracting context information from a current ticket describing the incident, the context information including:
a set of ticket-indicated component(s) indicated by the context information, anda first expression describing a symptom; determining, based at least in part upon the set of ticket-indicated component(s), a set of ticket-indicated machine data source(s) which generate, automatically by machine logic, a respectively corresponding set of ticket-indicated log(s); and using the first expression as a first set of keyword(s) to, automatically by machine logic, search the set of ticket-indicated log(s) to determine relevant information related to the incident.