AUTOMATIC CORRELATION OF DYNAMIC SYSTEM EVENTS WITHIN COMPUTING DEVICES

摘要

Systems and methods are described herein for logging system events within an electronic machine using an event log structured as a collection of tree-like cause and effect graphs. An event to be logged may be received. A new event node may be created within the event log for the received event. One or more existing event nodes within the event log may be identified as having possibly caused the received event. One or more causal links may be created within the event log between the new event node and the one or more identified existing event nodes. The new event node may be stored as an unattached root node in response to not identifying an existing event node that may have caused the received event.

主权项

1. A method, comprising:
providing, using a computing device, an event log structured as a collection of tree-like graphs; receiving, using the computing device, information regarding a new event to be logged; creating, using the computing device, a new event node within the event log for the new event; identifying, using the computing device, any existing event nodes within the event log that each represent a respective past event that may have caused the new event; creating, using the computing device, a causal link within the event log between the new event node and each of the identified existing event nodes; and storing, using the computing device, the new event node as an unattached root node in response to not identifying an existing event node representing a past event that may have caused the new event.