WO2016199411A1 - Dispositif d'affichage de journal, procédé d'affichage de journal et programme d'affichage de journal - Google Patents

Dispositif d'affichage de journal, procédé d'affichage de journal et programme d'affichage de journal Download PDF

Info

Publication number
WO2016199411A1
WO2016199411A1 PCT/JP2016/002768 JP2016002768W WO2016199411A1 WO 2016199411 A1 WO2016199411 A1 WO 2016199411A1 JP 2016002768 W JP2016002768 W JP 2016002768W WO 2016199411 A1 WO2016199411 A1 WO 2016199411A1
Authority
WO
WIPO (PCT)
Prior art keywords
log
information
logs
time
display
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/JP2016/002768
Other languages
English (en)
Japanese (ja)
Inventor
真二郎 八木
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
NEC Corp
Original Assignee
NEC Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by NEC Corp filed Critical NEC Corp
Publication of WO2016199411A1 publication Critical patent/WO2016199411A1/fr
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine

Definitions

  • the present invention relates to a technique for displaying logs collected from devices.
  • Patent Documents 1 and 2 disclose techniques for effectively displaying collected logs.
  • the log visualization device of Patent Document 1 includes log information storage means, log template storage means, and log group storage means.
  • the log information storage unit stores log information including identification information for each target device and a device label given by an additional attribute of the device.
  • the log template storage means stores the template information to which the template label is given according to the usage status in the log template which is an important part extracted from the log information.
  • the log group storage means stores log groups that are grouped based on the co-occurrence of the template information and are assigned with template labels.
  • the log visualization device having the above configuration operates as follows. That is, a time series of log information to be visualized, a device label to be visualized, a template label that matches an arbitrary rule, a log template occurrence frequency, and a log template periodicity are received from the user. Based on these, the log information of the log information storage means is matched with the information of the log template storage means or the log group storage means, the log group and template label are plotted on the vertical axis, and the generation time of the log information is plotted on the horizontal axis. Generate and display a graph to plot.
  • the visualization device of Patent Document 2 includes a log extraction unit and a log information generation unit.
  • the log extraction unit extracts a log indicating communication between processes from logs output in the large-scale distributed processing system.
  • the log information generation unit is configured to execute a transmission source process and a transmission destination process, and a transmission source process and a transmission destination process, in which a processing request is transmitted and received in communication, from information included in the log extracted by the log extraction unit.
  • Log information indicating the origin server and destination server, the contents of the processing request, and the time when the communication occurred is generated.
  • the visualization device having the above configuration operates as follows. That is, based on the log information generated by the log information generation unit, processing request transmission / reception from the transmission source process of the transmission source server to the transmission destination process of the transmission destination server is drawn to indicate the content and time of the processing request. Generate and display the drawn data.
  • the log visualization devices of Patent Document 1 and Patent Document 2 have the following problems. That is, in the log visualization device of Patent Document 1, it is necessary to prepare log template information in advance. However, it is impossible to prepare all templates for various devices in advance. Moreover, in the visualization apparatus of patent document 2, the state where communication is not performed cannot be illustrated. The reason is that the method is illustrated with information specifying the source and destination of the process from the log.
  • the present invention has been made in view of the above problems, and its purpose is to display a log without preparing information such as a template in advance and irrespective of a specific state such as a communication state. Is to make it possible.
  • the log display device includes a log extraction unit that extracts logs to be excluded from aggregation targets, a log reading unit that clusters logs based on similarity, and a log obtained by removing the extracted logs from the clustered logs
  • a time totaling unit that counts based on time information, a space totaling unit that totals based on spatial information, and a generation unit that generates display information including the time information, the spatial information, and the totaling result.
  • logs are clustered based on similarity, logs not included in the aggregation target are extracted, and logs excluding the extracted logs from the clustered logs are aggregated based on time information. And summing up based on the spatial information, and generating and displaying display information including the time information, the spatial information, and the counting result.
  • the log display program includes a process for clustering logs based on similarity, a process for extracting logs that are not included in the aggregation target, and a log obtained by removing the extracted logs from the clustered logs as time information.
  • a process of summing up based on the spatial information, and a process of generating and displaying display information including the time information, the spatial information, and the result of the summation are executed.
  • the present invention it is possible to display a log without preparing information such as a template in advance and irrespective of a specific state such as a communication state.
  • FIG. 1 is a block diagram showing a configuration of a log display device according to an embodiment of the present invention.
  • the log display device 1 according to this embodiment includes a log extraction unit 11 that extracts logs to be excluded from aggregation targets.
  • a log reading unit 101 that clusters logs based on similarity
  • a time totaling unit 102 that totals logs based on time information, except for the extracted logs from the clustered logs
  • the display information generation unit 10 includes a space totaling unit 103 that performs totalization, and a generation unit 104 that generates display information including the time information, the spatial information, and the totalization result. Furthermore, it has the display part 12 which displays the said display information.
  • FIG. 2 is a block diagram showing the configuration of the log display device according to the embodiment of the present invention.
  • the log display device 2 of this embodiment includes a display information generation unit 20, a black list generation unit 21, a display unit 22, a storage unit 23, and an input unit 24.
  • the display information generation unit 20 includes a log reading unit 201, a time totaling unit 202, a space totaling unit 203, and a generation unit 204.
  • the black list generation unit 21 includes an ID (identification) extraction unit 211 and an ID deletion unit 212.
  • the storage unit 23 includes a log file storage unit 231, an ID table storage unit 232, a black list storage unit 233, an aggregation result table storage unit 234, and a spatial information storage unit 235.
  • the log file storage unit 231 stores the log file transmitted from the target device.
  • the ID table storage unit 232 stores the log file to which the ID is assigned.
  • the black list storage unit 233 stores the log file of the ID extracted as a black list.
  • the tabulation result table storage unit 234 stores a tabulation result table in which log files to which IDs are assigned are tabulated based on time information and space information.
  • the spatial information storage unit 235 stores spatial information having a log file name (ID), a device name, a system name, and a system number.
  • the log reading unit 201 reads a log file transmitted from each target device and stored in the log file storage unit 231, assigns an ID corresponding to a portion extracted from each log file to each log file, and adds the ID to the log
  • the file is stored in the ID table storage unit 232.
  • the log reading unit 201 classifies log files.
  • the log file includes information such as the log occurrence time, the details of the occurrence event, the generation device and the system.
  • the log reading unit 201 clusters each line of the log file and assigns a unique number (ID). For clustering, a hierarchical method such as the shortest distance method or a division optimization method such as the K-MEANS method can be used. Therefore, the same ID is assigned to log files with high similarity.
  • the log file to which the ID is assigned is stored in the ID table storage unit 232.
  • the log reading unit 201 also generates space information (topology information) having a log file name (ID), a device name, a system name, and a system number based on information such as a device and a system included in the log file.
  • Information can be registered in the information storage unit 235.
  • the spatial information may be created in advance and registered in the spatial information storage unit 235.
  • the time totaling unit 202 creates a totaling result table as shown in FIG. 3 and stores it in the totaling result table storage unit 234.
  • the time totaling unit 202 firstly, for each unit time designated by the user inputting from the input unit 24 the log file to which the ID stored in the ID table storage unit 232 is assigned. The number of appearances for each ID is totaled.
  • time may be given as an initial value, and the number of appearances per unit time may be totaled based on the initial value.
  • a unit time identifier is assigned to the count result for each unit time.
  • the unit time identifier a value obtained by adding 1 to the maximum value of the unit time identifiers in the total result table so far is used. For example, “1” can be assigned as the first unit time identifier.
  • the time counting unit 202 searches for unit time identifiers in which IDs have appeared in the past, and classifies the IDs according to the classification method shown in FIG.
  • five types are defined as examples of classification methods. That is, when it appears within the past 24 unit hours, it is classified as Category 1, when it appears within the past 24 unit hours and within 72 unit hours, it is classified as Category 2, and when it appears within the past 72 unit hours and within 168 unit hours, it is classified as Category 3.
  • the case where it has appeared in the past 168 unit times is classified as category 4, and the case where it does not exist in the past ID table is classified as category 5.
  • the ID of the category 5 may be an ID extracted in a black list described later.
  • the time totaling unit 202 classifies all IDs, and totals the total number of log files per unit time included in each class.
  • classification method list shown in FIG. 4 can be used in the time counting unit 202 in advance.
  • a list of classification methods can be stored in the storage unit 23 in advance, and can be read and used when the time counting unit 202 operates.
  • the blacklist generation unit 21 extracts IDs to be registered as a blacklist from the log files to which IDs are assigned and stored in the ID table storage unit 232 and totalized in the totaling result table.
  • the ID extraction unit 211 extracts an ID that does not exist in the past for the ID within the designated unit time. That is, when, for example, the time when a failure clearly occurs is input from the input unit 24, based on this, the ID extraction unit 211 totalizes a list of IDs included in the corresponding unit time from the input time. Get from the result table. Then, the ID of category 4 or 5 is extracted from the list of IDs.
  • the ID deletion unit 212 includes an ID log storage unit 232 that includes an ID log file that does not include an ID in a unit time before its own time and an ID log file of the category 5 among the IDs of the category 4. And the log file of the deleted ID is stored (registered) in the black list storage unit 233 as a black list. By doing so, a log file with an ID that is highly likely to indicate an abnormality is registered as a black list and deleted from the ID table storage unit 232. As a result, when a log file with the same ID is subsequently generated, it is possible to classify it into category 5 as an ID that does not exist in the ID table storage unit 232.
  • the time totaling unit 202 totals IDs, IDs included in the blacklist are excluded from the totalization, and when a log file having the same ID as the ID included in the blacklist occurs, the category 5 It can be classified as an ID that is highly likely to indicate an abnormality.
  • the space tabulation unit 203 classifies and tabulates the IDs tabulated in the tabulation result table based on the space information (topology information) stored in the space information storage unit 235.
  • FIG. 5 shows an example of spatial information, in which a log file name, a system number, a system name, and a server name as a totaling unit are registered. Based on this spatial information, it is possible to first aggregate the classification results of the log files for each server, and then aggregate the classification results for each system using the aggregation results for each server.
  • the totaling procedure by the time totaling unit 202 and the spatial totaling unit 203 is as described above. After the totaling by the time totaling unit 202, the totaling by the spatial totaling unit 203 is performed. Aggregation by the time aggregation unit 202 may be performed after the aggregation.
  • the generation unit 204 generates a screen based on the server unit or system unit classification specified in the spatial information, and displays the screen on the display unit 22. At this time, as shown in FIG. 6, the generation unit 204 can divide, for example, into groups of sections 1, 2, and 3 and groups of sections 4 and 5 for each ID. Then, as shown in FIG. 7, the screen for three-dimensional display with the time per unit time as the X-axis, the spatial information such as the system or server as the Y-axis, and the total number of each section in FIG. Generate for each.
  • the generation unit 204 uses space information such as a system or a server as the Z axis, and a circumferential direction of a circle centered on the Z axis as a time per unit time. It is also possible to generate a screen for three-dimensional display in which the radial direction of the circle centered at is the number of tabulations for each section.
  • the display unit 22 displays a screen generated by the generation unit 204.
  • the input unit 24 receives input of information such as time designation necessary for operating the log display device 2 by the user.
  • the display is divided into the groups 1, 2, and 3 and the groups 4 and 5 for the following reason. That is, in the classification method of FIG. 4, the categories 1, 2, and 3 are logs that occur in a short cycle within 168 hours (within one week). These are often logs that are inevitably generated if the device or system is operating normally. On the other hand, the category 4 is a log generated in a long cycle of a week unit or a month unit. These may include not only a log that is normally generated in a long cycle but also a log indicating an abnormality.
  • category 5 is a log that does not exist in the ID table, and this log may include the same log as the log registered as a black list. That is, the log classified into the category 5 is highly likely to be a log indicating an abnormality of the device or system.
  • the log display device 2 according to the present embodiment is characterized in that it is possible to distinguish and display logs that are highly likely to indicate this abnormality.
  • a feature of the log display device 2 of the present embodiment is that such a log can be displayed separately from a normal log.
  • the display is divided into the groups 1, 2, and 3 and the groups 4 and 5, but the display method is not limited to this.
  • Arbitrary division methods are possible, such as displaying the data in divisions 1, 2, 3, 4 and division 5.
  • it is effective to display the category 5 that has a high possibility of indicating an abnormality in an easily understandable manner.
  • the three categories 1, 2, and 3 are distinguished and displayed. However, since these are likely to be normal logs, the three are not distinguished and integrated. May be displayed.
  • the number of categories is not limited to 5, and at least two or more categories, a category indicating that there is a high probability of being a normal log and a category indicating a high possibility of being an abnormal log. I need it.
  • logs are clustered based on similarity. Furthermore, logs that are not included in the aggregation target are extracted. Furthermore, the log obtained by removing the extracted log from the clustered log is aggregated based on time information, aggregated based on spatial information, and display information including the temporal information, the spatial information, and the aggregated result is displayed. Generate and display.
  • an ID corresponding to the clustering is given to the log. Further, in the log ID corresponding to the specified time information, a log having an ID that does not exist at the time information time before the time of the specified time information is extracted, and the extracted log is Remove from clustered logs.
  • the time information includes information on a time interval for generating a log.
  • the spatial information includes the name of a system or device that generates a log.
  • the logs obtained by removing the extracted logs from the clustered logs are aggregated based on time information, and the logs aggregated based on the time information are aggregated based on spatial information.
  • logs obtained by removing the extracted logs from the clustered logs are aggregated based on spatial information, and the logs aggregated based on the spatial information are aggregated based on time information.
  • display information for generating a three-dimensional display of the time information, the spatial information, and the aggregation result is generated. The three-dimensional display is displayed in an XYZ coordinate system.
  • the extracted log is saved as a black list.
  • the log display program of the log display device 2 of the present embodiment causes the log to be clustered based on similarity. Furthermore, a process of extracting logs that are not included in the aggregation target is executed. Furthermore, a display including a process of adding the log obtained by removing the extracted log from the clustered log based on time information, and adding up based on spatial information, the time information, the spatial information, and the aggregation result A process for generating and displaying information is executed.
  • a process of giving an ID corresponding to the clustering to the log is executed.
  • the time information includes information on a time interval for generating a log.
  • the spatial information includes the name of a system or device that generates a log.
  • the log obtained by removing the extracted log from the clustered log is aggregated based on time information, and the log aggregated based on the time information is aggregated based on spatial information.
  • the log obtained by removing the extracted log from the clustered log is aggregated based on spatial information, and the log aggregated based on the spatial information is aggregated based on time information.
  • a process for generating display information for three-dimensionally displaying the time information, the spatial information, and the total result is executed.
  • processing for displaying the three-dimensional display in the XYZ coordinate system is executed.
  • the log display device 2 of the present embodiment can be an information processing device such as a PC (Personal Computer) or a server.
  • the display information generation unit 20 and the black list generation unit 21 can be realized by operating a log display program by a CPU using a CPU (Central Processing Unit) that is a calculation resource of the information device.
  • storage part 23 is realizable using the memory and HDD (Hard Disk Drive) which are the storage resources which information equipment has.
  • a log generated and transmitted by the target device can be received and stored in the log file storage unit 231 via the communication function of the information device.
  • the display unit 22 can be realized by a display or a printer included in the information device.
  • the input unit 24 can be realized by a keyboard, a mouse, a touch panel, or the like included in the information device.
  • a log extractor for extracting logs to be excluded from the aggregation target A log reading unit that clusters logs based on similarity, a time totaling unit that totals logs excluding the extracted logs from the clustered logs based on time information, and a spatial totaling that totals based on spatial information
  • a log display device comprising: a display unit configured to display the display information.
  • the log display device according to one of appendices 1 to 4, wherein the spatial information includes a system name or a device name for generating a log.
  • the time totaling unit totals logs obtained by removing the extracted logs from the clustered logs based on time information, and the space totaling unit totals logs collected by the time totaling unit based on spatial information.
  • the spatial totalization unit totalizes logs obtained by removing the extracted logs from the clustered logs based on spatial information, and the time totaling unit calculates the logs totaled by the spatial totalization unit based on time information. 6.
  • the log display device according to one of appendices 1 to 5, for counting.
  • Appendix 13 13.
  • Appendix 14 14.
  • Appendix 15 The log obtained by removing the extracted log from the clustered log is aggregated based on time information, and the log aggregated based on the time information is aggregated based on spatial information.
  • the logs obtained by removing the extracted logs from the clustered logs are aggregated based on spatial information, and the aggregated logs based on the spatial information are aggregated based on time information.
  • Log display method described in the section. (Appendix 16) 16. The log display method according to one of appendices 10 to 15, wherein display information for generating a three-dimensional display of the time information, the spatial information, and the aggregation result is generated.
  • Appendix 17 The log display method according to appendix 16, wherein the three-dimensional display is displayed in an XYZ coordinate system.
  • Appendix 18 18. The log display method according to one of appendices 10 to 17, wherein the extracted log is stored as a black list.
  • Appendix 21 A process of executing a process of extracting a log having an ID that does not exist at the time of the time information prior to the time of the specified time information in the ID of the log corresponding to the specified time information; 21.
  • Appendix 22 The log display program according to any one of appendices 19 to 21, wherein the time information includes information of a time interval for generating a log.
  • Appendix 23 23.
  • (Appendix 24) A process of totalizing logs based on time information, excluding the extracted logs from the clustered logs, and totaling logs based on the time information based on spatial information; Alternatively, the log obtained by removing the extracted log from the clustered log is aggregated based on spatial information, and the log aggregated based on the spatial information is aggregated based on time information. 24.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Quality & Reliability (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Debugging And Monitoring (AREA)

Abstract

L'objectif de la présente invention est de permettre l'affichage d'un journal, sans préparation préalable d'informations telles qu'un modèle, et indépendamment d'un état particulier tel qu'un état de communication. L'invention a trait à un dispositif d'affichage de journal, comprenant : une unité d'extraction de journal qui extrait un journal à exclure d'un tableau ; une unité de génération d'informations d'affichage qui comporte une unité de lecture de journaux regroupant les journaux sur la base de leur similitude, une unité de mise en tableau temporelle qui met en tableau, selon des informations temporelles, les journaux regroupés à l'exclusion du journal extrait, une unité de mise en tableau spatiale qui met en tableau sur la base d'informations spatiales, et une unité de génération qui génère des informations d'affichage incluant les informations temporelles, les informations spatiales et les résultats de mise en tableau ; et une unité d'affichage qui affiche les informations d'affichage.
PCT/JP2016/002768 2015-06-11 2016-06-08 Dispositif d'affichage de journal, procédé d'affichage de journal et programme d'affichage de journal Ceased WO2016199411A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2015-117901 2015-06-11
JP2015117901 2015-06-11

Publications (1)

Publication Number Publication Date
WO2016199411A1 true WO2016199411A1 (fr) 2016-12-15

Family

ID=57503546

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2016/002768 Ceased WO2016199411A1 (fr) 2015-06-11 2016-06-08 Dispositif d'affichage de journal, procédé d'affichage de journal et programme d'affichage de journal

Country Status (1)

Country Link
WO (1) WO2016199411A1 (fr)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106909494A (zh) * 2017-02-28 2017-06-30 郑州云海信息技术有限公司 一种在基于linux平台的刀片服务器中实时显示bmc日志的方法
CN108256808A (zh) * 2016-12-28 2018-07-06 平安科技（深圳）有限公司 信息展示方法和装置
CN113138971A (zh) * 2021-04-30 2021-07-20 深圳市度申科技有限公司 一种可视化日志分析方法、装置及系统

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2012160637A1 (fr) * 2011-05-23 2012-11-29 富士通株式会社 Dispositif de détermination de message et programme de détermination de message
WO2013035266A1 (fr) * 2011-09-05 2013-03-14 日本電気株式会社 Dispositif de surveillance, procédé de surveillance et programme
JP2014153723A (ja) * 2013-02-04 2014-08-25 Nippon Telegr & Teleph Corp <Ntt> ログ生起異常検知装置及び方法
JP2015095060A (ja) * 2013-11-12 2015-05-18 日本電信電話株式会社 ログ分析装置及び方法

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2012160637A1 (fr) * 2011-05-23 2012-11-29 富士通株式会社 Dispositif de détermination de message et programme de détermination de message
WO2013035266A1 (fr) * 2011-09-05 2013-03-14 日本電気株式会社 Dispositif de surveillance, procédé de surveillance et programme
JP2014153723A (ja) * 2013-02-04 2014-08-25 Nippon Telegr & Teleph Corp <Ntt> ログ生起異常検知装置及び方法
JP2015095060A (ja) * 2013-11-12 2015-05-18 日本電信電話株式会社 ログ分析装置及び方法

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108256808A (zh) * 2016-12-28 2018-07-06 平安科技（深圳）有限公司 信息展示方法和装置
CN106909494A (zh) * 2017-02-28 2017-06-30 郑州云海信息技术有限公司 一种在基于linux平台的刀片服务器中实时显示bmc日志的方法
CN113138971A (zh) * 2021-04-30 2021-07-20 深圳市度申科技有限公司 一种可视化日志分析方法、装置及系统

Similar Documents

Publication Publication Date Title
JP2022118108A (ja) ログ監査方法、装置、電子機器、媒体およびコンピュータプログラム
US11068510B2 (en) Method and system for implementing efficient classification and exploration of data
US10237295B2 (en) Automated event ID field analysis on heterogeneous logs
CN110321371A (zh) 日志数据异常检测方法、装置、终端及介质
Fu et al. Digging deeper into cluster system logs for failure prediction and root cause diagnosis
US20180357214A1 (en) Log analysis system, log analysis method, and storage medium
US20150172303A1 (en) Malware Detection and Identification
WO2016093836A1 (fr) Détection interactive d&#39;anomalies de système
WO2016132717A1 (fr) Système d&#39;analyse de journal, procédé d&#39;analyse de journal, et support d&#39;enregistrement de programme
CN111339293B (zh) 告警事件的数据处理方法、装置和告警事件的分类方法
JP2018045403A (ja) 異常検知システム及び異常検知方法
CN113128213B (zh) 日志模板提取方法及装置
JP2016076075A (ja) フィルタルール作成装置、フィルタルール作成方法、およびプログラム
WO2020155651A1 (fr) Procédé et dispositif de stockage et d&#39;interrogation d&#39;informations de journal
CN112948436A (zh) 告警工单合并方法、装置、设备及存储介质
CN114124509A (zh) 基于Spark的网络异常流量检测的方法及系统
CN110879805A (zh) 一种数据异常发现方法、装置、服务器及存储介质
CN110677271B (zh) 基于elk的大数据告警方法、装置、设备及存储介质
WO2016199411A1 (fr) Dispositif d&#39;affichage de journal, procédé d&#39;affichage de journal et programme d&#39;affichage de journal
JP6340990B2 (ja) メッセージ表示方法、メッセージ表示装置、およびメッセージ表示プログラム
WO2020012579A1 (fr) Dispositif d&#39;analyse de journal, procédé d&#39;analyse de journal et programme
JPWO2018110327A1 (ja) 異常識別システム、方法及びプログラム
WO2021047576A1 (fr) Appareil et procédé de traitement d&#39;enregistrement de journal, et dispositif et support de stockage lisible par ordinateur
CN116582310A (zh) 一种区块链系统异常检测方法、装置、终端及存储介质
KR20230119535A (ko) 멀티 프라이빗 클라우드의 로그 관리 시스템 및 방법

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16807119

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16807119

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: JP