Method and system for log aggregation
View Patent ↗Systems and methods for aggregating one or more log records are provided. An example method includes receiving an indication that a request has been completed. The method also includes aggregating, at the log aggregator, log records that were created based on processing the request. The log records include a unique identifier associated with the request. The method further includes sending the aggregated log records to the log client.
1. A system for aggregating one or more log records, comprising:
a non-transitory memory storing a log aggregator and a log client;
one or more hardware processors coupled to the memory and operable to read instructions from the memory to perform the steps of:
determining that a request has been completed based on determining that no log records associated with the request have been created within a timeout period;
aggregating, at the log aggregator, log records that were created based on processing the request, the log records including a unique identifier associated with the request; and
sending the aggregated log records to the log client.
2. The system of claim 1 , wherein the one or more hardware processors are operable to read instructions from the memory to perform the steps of:
causing the log client to send the aggregated log records to a centralized access log.
3. The system of claim 2 , wherein the one or more hardware processors are operable to read instructions from the memory to perform the steps of:
logging, at an application, one or more events associated with the request; and
creating one or more log records based on the logging.
4. The system of claim 3 , wherein the one or more hardware processors are operable to read instructions from the memory to perform the steps of:
opening, at the application, a transaction based on logging the one or more events; and
in response to receiving the aggregated log records, closing the transaction.
5. The system of claim 1 , wherein the one or more hardware processors are operable to read instructions from the memory to perform the steps of:
detecting a log record that was created based on processing the request, wherein the log record has not been sent to the log client;
determining that the log record is associated with a closed transaction; and
sending an alert indicating that the log record has not been sent to the log client.
6. The system of claim 5 , wherein the one or more hardware processors are operable to read instructions from the memory to perform the steps of:
in response to determining that the log record is associated with a closed transaction and has not been sent to the log client, extending the timeout period.
7. A method for aggregating one or more log records, comprising:
determining, by a computer comprising one or more hardware processors, an amount of time that has elapsed since a particular log record has been created, the particular log record associated with a request;
determining, by the computer based on the amount of time being greater than a timeout period, that the request has been completed;
aggregating, by the computer, log records that were created based on processing the request, the log records including a unique identifier associated with the request; and
sending the aggregated log records to a log client.
8. The method of claim 7 , further comprising:
causing the log client to send the aggregated log records to a centralized access log.
9. The method of claim 8 , further comprising:
logging, at an application, one or more events associated with the request; and
creating one or more log records based on the logging.
10. The method of claim 9 , further comprising:
opening, at the application, a transaction based on logging the one or more events; and
in response to receiving the aggregated log records, closing the transaction.
11. The method of claim 7 , further comprising:
detecting a log record that was created based on processing the request, wherein the log record has not been sent to the log client;
determining that the log record is associated with a closed transaction; and
sending an alert indicating that the log record has not been sent to the log client.
12. The method of claim 11 , further comprising
in response to determining that the log record is associated with a closed transaction and has not been sent to the log client, extending the timeout period.
13. A non-transitory computer-readable medium comprising instructions which, in response to execution by a computer system, cause the computer system to perform operations comprising:
determining that an amount of time that has elapsed since a most recent log record has been created exceeds a timeout period, the most recent log record associated with a request;
in response to the determining, aggregating log records that were created based on processing the request, the log records including a unique identifier associated with the request; and
sending the aggregated log records to a log client.
14. The non-transitory computer-readable medium of claim 13 , wherein the operations further comprise:
sending, at the log client, the aggregated log records to a centralized access log.
15. The non-transitory computer-readable medium of claim 14 , wherein the operations further comprise:
logging, at an application, one or more events associated with the request; and
creating one or more log records based on the logging.
16. The non-transitory computer-readable medium of claim 13 , wherein the operations further comprise:
detecting a log record that was created based on processing the request, wherein the log record has not been sent to the log client;
determining that the log record is associated with a closed transaction; and
sending an alert indicating that the log record has not been sent to the log client.
17. The non-transitory computer-readable medium of claim 16 , wherein the operations further comprise:
in response to determining that the log record is associated with a closed transaction and has not been sent to the log client, extending the timeout period.