JOINT SEMANTIC AND FORMAT SIMILARITY FOR LARGE SCALE LOG RETRIEVAL

摘要

A method for diagnosing computer system faults using log retrieval based on joint semantic and syntactic similarities includes receiving a set of query logs, defining joint semantic and syntactic similarities between the set of query logs and respective ones of multiple sets of historical logs based on semantic content and syntactic information obtained for the set of query logs and the multiple sets of historical logs, the multiple sets of historical logs being associated with historical computer system fault diagnoses, retrieving a set of historical logs from the multiple sets of historical logs to obtain a retrieved set of historical logs for computer system fault comparison based on a similarity measure corresponding to each of the multiple sets of historical logs derived from the joint semantic and syntactic similarities, and transmitting the retrieved set of historical logs to one or more computing devices to perform the computer system fault comparison.