Log Intelligence: Systematically Leveraging Logs Using Development Knowledge

日志是在运行时通过记录开发人员故意添加到源代码中的语句来生成的。在执行过程中生成的日志在大型软件系统的现场调试和支持活动中发挥着重要作用。这样的日志不仅是为了方便开发商和运营商，而且已经成为法律要求的一部分(例如，2002年的萨班斯-奥克斯利法案)。近年来，许多公司(例如IBM、BlackBerry和Microsoft)已经开始利用日志中丰富的知识来支持其大型软件系统的开发和运营。日志的广泛使用导致了新的日志分析平台(如Splunk、XpoLog和Logstash)的出现，这些平台支持收集、存储、搜索和分析海量日志数据。

Logs are generated at run-time by logging statements that are deliberately added into the source code by developers. Logs generated during the execution play an essential role in field debugging and support activities of large software systems. Such logs are not only for the convenience of developers and operators, but have already become part of legal requirements (e.g., the Sarbanes-Oxley Act of 2002). In recent years, many companies (e.g., IBM, BlackBerry and Microsoft) have started leveraging the rich knowledge in logs to support the development and operation of their large software systems. The broad usage of logs lead to the emergence of a new market for log analysis platforms (e.g., Splunk, XpoLog, and Logstash), which support collecting, storing, searching, and analyzing the large amounts of log data.