VMware, Inc.
ROOT CAUSE IDENTIFICATION OF A PROBLEM IN A DISTRIBUTED COMPUTING SYSTEM USING LOG FILES

Abstract:

Automated methods and systems described directed to determining a root cause of problem with a system executing in a distributed computing system. Methods and systems train a normal-state model that characterizes a normal state of the system based on normal log files generated by event sources of the system executed under normal or test conditions. Methods and systems use the normal-state model and a log file containing log messages recorded about the time when a problem with the system has been detected to identify log messages that describe a root cause of the problem.