Cross-machine event log correlation

摘要

In computing environments having multiple computers, where such computers may comprise virtual machines, events are logged in association with corresponding activity identifiers. When a data packet associated with an activity is transferred to a destination machine, the activity identifier corresponding to the activity is transferred along with the data packet and used by the destination machine when logging its events. This allows events from the two machines to be correlated according to the activities to which they pertain.

主权项

1. In a virtual computing environment, a method comprising:
within a host machine of a virtual machine, communicating a data packet through a first protocol stack, the first protocol stack comprising a first series of processing components; within the virtual machine, communicating the data packet through a second protocol stack, the second protocol stack comprising a second series of processing components; associating one or more activity identifiers with the data packet as it is communicated through the first and second protocol stacks; reporting events from the processing components of the first and second protocol stacks, the reported events relating to processing of the data packet by the processing components of the first and second protocol stacks; specifying the one or more activity identifiers with the reported events; and communicating between the host machine and the virtual machine at least one of the one or more activity identifiers with the data packet.