Practical Multi-pattern Matching Approach for Fast and Scalable Log Abstraction

Kód výsledku v IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216224%3A14330%2F16%3A00091170" target="_blank" >RIV/00216224:14330/16:00091170 - isvavai.cz</a>

Výsledek na webu

<a href="http://dx.doi.org/10.5220/0006006603190329" target="_blank" >http://dx.doi.org/10.5220/0006006603190329</a>

DOI - Digital Object Identifier

<a href="http://dx.doi.org/10.5220/0006006603190329" target="_blank" >10.5220/0006006603190329</a>

Jazyk výsledku

angličtina

Název v původním jazyce

Practical Multi-pattern Matching Approach for Fast and Scalable Log Abstraction

Popis výsledku v původním jazyce

Log abstraction, i.e. the separation of static and dynamic part of log message, is becoming an indispensable task when processing logs generated by large enterprise systems and networks. In practice, the log message types are described via regex matching patterns that are in turn used to actually facilitate the abstraction process. Although the area of multi-regex matching is well studied, there is a lack of suitable practical implementations available for common programming languages. In this paper we present an alternative approach to multi-pattern matching for the purposes of log abstraction that is based on a trie-like data structure we refer to as regex trie. REtrie is easy to implement and the real world experiments show its scalability and good performance even for thousands of matching patterns.

Název v anglickém jazyce

Practical Multi-pattern Matching Approach for Fast and Scalable Log Abstraction

Popis výsledku anglicky

Log abstraction, i.e. the separation of static and dynamic part of log message, is becoming an indispensable task when processing logs generated by large enterprise systems and networks. In practice, the log message types are described via regex matching patterns that are in turn used to actually facilitate the abstraction process. Although the area of multi-regex matching is well studied, there is a lack of suitable practical implementations available for common programming languages. In this paper we present an alternative approach to multi-pattern matching for the purposes of log abstraction that is based on a trie-like data structure we refer to as regex trie. REtrie is easy to implement and the real world experiments show its scalability and good performance even for thousands of matching patterns.

Druh

D - Stať ve sborníku

CEP obor

IN - Informatika

OECD FORD obor

—

Projekt

—

Návaznosti

S - Specificky vyzkum na vysokych skolach

Rok uplatnění

2016

Kód důvěrnosti údajů

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Název statě ve sborníku

ICSOFT-EA 2016 - Proceedings of the 11th International Joint Conference on Software Technologies

ISBN

9789897581946

ISSN

—

e-ISSN

—

Počet stran výsledku

11

Strana od-do

319-329

Název nakladatele

SCITEPRESS

Místo vydání

Lisbon, Portugal

Místo konání akce

Lisbon, Portugal

Datum konání akce

1. 1. 2016

Typ akce podle státní příslušnosti

CST - Celostátní akce

Kód UT WoS článku

—