Causal engine and correlation engine based log analyzer

摘要

A system for determining a root cause of an issue in an enterprise comprises a log reader, a time-series converter, a correlator, and a causal engine. The log reader receives data logs as unstructured data from a plurality of assets in the enterprise and converts the unstructured data to structured data. The time-series converter identifies a time scale for each data log, determines a common time scale based on the identified time scales, and converts the data logs to the common time scaled time series. Further, the correlator filters out data logs that do not contribute to a causal analysis to determine the root cause of the problem in the enterprise. Moreover, the causal engine performs the causal analysis using the data logs that were not filtered out to determine the root cause of the problem in the enterprise.