International Business Machines Corporation
Matching non-sequential log metadata with out-of-order record data

Abstract:

According to aspects of the present disclosure, a computer-implemented method includes generating a metadata record for each event record of a subset of a plurality of event records, the metadata record being one of a plurality of metadata records. The method further includes assigning a metadata indicator to each event record of the subset of the plurality of event records to indicate that the event record is associated with a metadata record. The method further includes assigning, for each event record of the subset of the plurality of event records and the metadata record associated therewith, a timestamp. The method further includes matching for each event record of the subset of the plurality of event records, one of the plurality of metadata records with the event record based at least in part on the metadata indicator and the timestamp.