Supercomputers are prone to frequent faults that adversely affect their performance, reliability and functionality. System logs collected on these systems are a valuable resource of information about their operational status and health. However, their massive size, complexity, and lack of standard format makes it difficult to automatically extract information that can be used to improve system management. In this work we propose a novel method to succinctly represent the contents of supercomputing logs, by using textual clustering to automatically find the syntactic structures of log messages. This information is used to automatically classify messages into semantic groups via an online clustering algorithm. Further, we describe a methodology for using the temporal proximity between groups of log messages to identify correlated events in the system. We apply our proposed methods to two large, publicly available supercomputing logs and show that our technique features nearly perfect accuracy for online log-classification and extracts meaningful structural and temporal message patterns that can be used to improve the accuracy of other log analysis techniques.
|Original language||English (US)|
|Title of host publication||16th International Conference on High Performance Computing, HiPC 2009 - Proceedings|
|Number of pages||10|
|State||Published - 2009|
|Event||16th International Conference on High Performance Computing, HiPC 2009 - Kochi, India|
Duration: Dec 16 2009 → Dec 19 2009
|Name||16th International Conference on High Performance Computing, HiPC 2009 - Proceedings|
|Other||16th International Conference on High Performance Computing, HiPC 2009|
|Period||12/16/09 → 12/19/09|
Copyright 2010 Elsevier B.V., All rights reserved.