WO2019140828A1

WO2019140828A1 - Electronic apparatus, method for querying logs in distributed system, and storage medium

Info

Publication number: WO2019140828A1
Application number: PCT/CN2018/089452
Authority: WO
Inventors: 王丽
Original assignee: 平安科技（深圳）有限公司
Priority date: 2018-01-17
Filing date: 2018-06-01
Publication date: 2019-07-25
Also published as: CN108427705B; CN108427705A

Abstract

Disclosed are an electronic apparatus, a method for querying logs in a distributed system, and a storage medium. The method comprises: storing, in a pre-determined database, a mapping relationship between the generation time of logs and the storage addresses of the logs in a pre-determined log storage file; after a log query instruction which is sent by a client and carries query parameters is received, according to a pre-determined log query rule, analyzing the query parameters and the mapping relationship to determine the storage address of the log generation time matching the query time; and acquiring logs stored at the determined storage address, traversing the acquired logs based on a query keyword to query a keyword of pre-set type matching the query keyword, and returning a log corresponding to the matching keyword of pre-set type to the client. An occupancy rate of host resources in the log query process is reduced, the query efficiency is improved, and the operating process is simple and is easy to implement.

Description

Electronic device, distributed system log query method and storage medium

This application claims priority to Chinese Patent Application No. 201810042991.8, entitled "Electronic Device, Distributed System Log Query Method and Storage Medium", filed on January 17, 2018, the entire contents of which are hereby incorporated by reference. Combined in the application.

Technical field

The present invention relates to the field of log processing and query, and in particular, to an electronic device, a distributed system log query method, and a storage medium.

Background technique

With the development of Internet technology and the popularity of Internet applications, in order to meet the growing business needs, the service background usually uses a distributed system to work, and stores the applications running on each server in the distributed system through a predetermined database. The log (the log includes the keyword and the log generation time). If there is an application failure, the professional needs to generate a corresponding linux, vim, less, or tail text query command according to the business operation keyword and the time when the failure occurs. Log to determine the cause of the failure. This way of querying logs is very expensive for the host resources, the query efficiency is low, and the operation process is complicated and error-prone.

Summary of the invention

In view of this, the present application provides an electronic device, a distributed system log query method, and a storage medium, which saves the occupancy rate of host resources in the log query process, improves query efficiency, and is simple and easy to implement.

First, in order to achieve the above object, the present application provides an electronic device including a memory and a processor connected to the memory, the processor for executing a distributed system log query program stored on the memory When the distributed system log query program is executed by the processor, the following steps are implemented:

A1. The real-time acquisition of the log generation time of each application in the distributed system and the storage address of the log in the predetermined log storage file, and the mapping relationship between the acquired log generation time and the storage address is generated. The mapping relationship is stored in a predetermined database;

After receiving the log query command with the query parameter sent by the client, analyzing the query parameter and the mapping relationship according to the predetermined log query rule, and determining the log corresponding to the log generation time that matches the query time. Storage address, the query parameter includes the query time;

A3: Obtain a log stored in the determined storage address, traverse the obtained log based on the query keyword, query a preset type keyword that matches the query keyword, and match the preset type keyword. The corresponding log is returned to the client, and the query parameter further includes a query keyword, and the log includes a preset type keyword.

In addition, to achieve the above object, the present application further provides a distributed system log query method, where the method includes the following steps:

S1. The real-time acquisition of the log generation time of each application in the distributed system and the storage address of the log in the predetermined log storage file, and the mapping relationship between the acquired log generation time and the storage address is generated. The mapping relationship is stored in a predetermined database;

S2: After receiving the log query instruction with the query parameter sent by the client, analyzing the query parameter and the mapping relationship according to the predetermined log query rule, and determining a log corresponding to the log generation time that matches the query time. Storage address, the query parameter includes the query time, and the log includes a log generation time;

S3: Obtain a log stored in the determined storage address, traverse the obtained log based on the query keyword, query a preset type keyword that matches the query keyword, and match the preset type keyword. The corresponding log is returned to the client, and the query parameter further includes a query keyword, and the log includes a preset type keyword.

In addition, in order to achieve the above object, the present application further provides a computer readable storage medium storing a distributed system log query program, the distributed system log query program being executable by at least one processor So that the at least one processor performs the following steps:

The real-time acquisition of the log generation time of each application in the distributed system and the storage address of the log in the predetermined log storage file, and the mapping relationship between the acquired log generation time and the storage address is generated. The mapping relationship is stored in a predetermined database;

After receiving the log query instruction with the query parameter sent by the client, analyzing the query parameter and the mapping relationship according to the predetermined log query rule, and determining the storage of the log corresponding to the log generation time that matches the query time. An address, the query parameter includes the query time;

Obtaining a log stored in the determined storage address, traversing the obtained log based on the query keyword, and querying a preset type keyword that matches the query keyword, and matching the matching preset type keyword The log is returned to the client, and the query parameter further includes a query keyword, and the log includes a preset type keyword.

Compared with the prior art, the electronic device, the distributed system log query method, and the storage medium provided by the present application store the log generation time in the predetermined database and the log in the predetermined log storage file. A mapping relationship between the storage addresses; after receiving the log query instruction with the query parameter sent by the client, analyzing the query parameter and the mapping relationship according to a predetermined log query rule, and determining the matching with the query time The storage address of the log, the query parameter includes the query time, the log includes a log generation time, the log stored in the determined storage address is obtained, and the log obtained by traversing the query keyword is queried, and the query is queried. The keyword matching the preset type keyword, and the log corresponding to the matched preset type keyword is returned to the client, the query parameter further includes a query keyword, and the log further includes a preset type keyword. The occupancy rate of the host resources in the log query process is saved, the query efficiency is improved, and the operation process is simple and easy to implement.

DRAWINGS

1 is a schematic diagram of an optional hardware architecture of an electronic device proposed by the present application;

2 is a schematic diagram of a program module of a distributed system log query program in an embodiment of an electronic device of the present application;

3 is a flow chart of an implementation of a preferred embodiment of the distributed system log query method of the present application.

The implementation, functional features and advantages of the present application will be further described with reference to the accompanying drawings.

Detailed ways

In order to make the objects, technical solutions, and advantages of the present application more comprehensible, the present application will be further described in detail below with reference to the accompanying drawings and embodiments. It is understood that the specific embodiments described herein are merely illustrative of the application and are not intended to be limiting. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present application without departing from the inventive scope are the scope of the present application.

It should be noted that the descriptions of "first", "second" and the like in the present application are for the purpose of description only, and are not to be construed as indicating or implying their relative importance or implicitly indicating the number of technical features indicated. . Thus, features defining "first" or "second" may include at least one of the features, either explicitly or implicitly. In addition, the technical solutions between the various embodiments may be combined with each other, but must be based on the realization of those skilled in the art, and when the combination of the technical solutions is contradictory or impossible to implement, it should be considered that the combination of the technical solutions does not exist. Nor is it within the scope of protection required by this application.

Referring to FIG. 1 , it is an optional hardware architecture diagram of the electronic device proposed by the present application. In this embodiment, the electronic device 10 may include, but is not limited to, the memory 11, the processor 12, and the network interface 13 being communicably connected to each other through the communication bus 14. It should be noted that FIG. 1 only shows the electronic device 10 having the components 11-14, but it should be understood that not all illustrated components may be implemented, and more or fewer components may be implemented instead.

The memory 11 includes at least one type of computer readable storage medium including a flash memory, a hard disk, a multimedia card, a card type memory (for example, SD or DX memory, etc.), a random access memory (RAM), and a static memory. Random access memory (SRAM), read only memory (ROM), electrically erasable programmable read only memory (EEPROM), programmable read only memory (PROM), magnetic memory, magnetic disk, optical disk, and the like. In some embodiments, the memory 11 may be an internal storage unit of the electronic device 10, such as a hard disk or memory of the electronic device 10. In other embodiments, the memory 11 may also be an outsourced storage device of the electronic device 10, such as a plug-in hard disk equipped on the electronic device 10, a smart memory card (SMC), and a secure digital (Secure Digital, SD) ) cards, flash cards, etc. Of course, the memory 11 can also include both an internal storage unit of the electronic device 10 and an outsourced storage device thereof. In this embodiment, the memory 11 is generally used to store an operating system installed on the electronic device 10 and various types of application software, such as a distributed system log query program. Further, the memory 11 can also be used to temporarily store various types of data that have been output or are to be output.

Processor 12 may be a Central Processing Unit (CPU), controller, microcontroller, microprocessor, or other data processing chip in some embodiments. The processor 12 is typically used to control the overall operation of the electronic device 10. In this embodiment, the processor 12 is configured to run program code or processing data stored in the memory 11, such as a distributed distributed system log query program or the like.

The network interface 13 may include a wireless network interface or a wired network interface, which is typically used to establish a communication connection between the electronic device 10 and other electronic devices.

Communication bus 14 is used to implement a communication connection between components 11-13.

Figure 1 shows only the electronic device 10 with components 11-14 and a distributed system log query program, but it should be understood that not all illustrated components may be implemented and that more or fewer components may be implemented instead. .

Optionally, the electronic device 10 may further include a user interface (not shown in FIG. 1), and the user interface may include a display, an input unit such as a keyboard, wherein the user interface may further include a standard wired interface, a wireless interface, and the like.

Alternatively, in some embodiments, the display may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, and an OLED touch sensor or the like. Further, the display may also be referred to as a display screen or display unit for displaying information processed in the electronic device 10 and a user interface for displaying visualizations.

In an embodiment, when the distributed system log query program stored in the memory 11 is executed by the processor 12, the following operations are implemented:

Obtaining a log generation time in the distributed system and a storage address of the log in a predetermined log storage file, generating a mapping relationship between the acquired log generation time and the storage address, and storing the mapping relationship in a predetermined In the database;

In this embodiment, a controller interface is configured on a predetermined control center of the distributed system based on the springwebmvc architecture, and a request for calling a log is sent to the controller interface, and the controller interface responds to the request for calling the log, The log-collector is invoked to execute a log collection command. The log-collector is a preset type log collection system installed on each server in advance. After receiving the call request of the controller interface, the log collection system collects corresponding commands. a log generation time on the server and a storage address of the log in a predetermined log storage file, and returning the collected log generation time in the distributed system and the log in a predetermined log storage file Storage address

A mapping relationship between the acquired log generation time and the storage address is generated, and the mapping relationship is stored in a predetermined database.

In this embodiment, the predetermined log storage file may be the same storage address on each server. For example, the predetermined log storage file is stored in the local disk C of each server. In other embodiments, the predetermined The log storage file may also be a different storage address on each server. For example, the predetermined log storage file is stored in the local disk C in some servers and in the local disk D in other servers.

The log collection system obtains a log generated by each application during operation and a storage address of the log in a predetermined log storage file by accessing a storage address of the predetermined log storage file, where the log includes Preset type keywords and log generation time. For example, preset type keywords include operation keywords and business keywords, and the log generation time is in seconds.

After receiving the log query command with the query parameter sent by the client, analyzing the query parameter and the mapping relationship according to the predetermined log query rule, and determining a log corresponding to the log generation time that matches the query time. Storage address, the query parameter includes the query time;

In this embodiment, the predetermined log query rule is, for example, if a log generation time matching the query time is searched from the predetermined database, the log generation time is generated according to the log. Determining a mapping relationship between storage addresses, and determining a storage address of a log corresponding to the log generation time;

And if the log generation time that matches the query time is not found in the predetermined database, the index of the storage address of the predetermined log storage file is generated according to a predetermined index generation rule;

And storing, according to the index, the storage address of the predetermined log storage file, and querying a storage address of a log corresponding to the log generation time that matches the query parameter.

In this embodiment, the index includes an initial query address and an end query address; the predetermined index generation rule is, for example, acquiring an initial storage address and an ending storage address of the predetermined log storage file, and calculating the location An initial storage address and an intermediate storage address of the end storage address;

Acquiring the log stored in the intermediate storage address, and determining the size relationship between the log generation time and the query time corresponding to the obtained log;

If the generated log generation time is greater than the query time, the initial query address is set as the initial storage address, and the end query address is defined as the intermediate storage address;

If the obtained log generation time is less than the query time, the initial query address is set as the intermediate storage address, and the end query address is set as the end storage address.

Obtaining a log stored in the determined storage address, traversing the obtained log based on the query keyword, and querying a preset type keyword that matches the query keyword, and matching the matching preset type keyword The log is returned to the client, and the query parameter further includes a query keyword, and the log further includes a preset type keyword.

It can be seen from the above embodiments that the electronic device proposed by the present application records the relationship between the generation time of the log in the predetermined database and the storage address of the log in the predetermined log storage file; After the log query command with the query parameter is sent, the query parameter and the mapping relationship are analyzed according to a predetermined log query rule, and the storage address of the log matching the query time is determined, and the query parameter includes the The query time includes the log generation time, the log stored in the determined storage address, the log obtained by the query keyword traversal, and the preset type keyword matching the query keyword, and Returning the log corresponding to the matched preset type keyword to the client, the query parameter further includes a query keyword, and the log further includes a preset type keyword. The occupancy rate of the host resources in the log query process is saved, the query efficiency is improved, and the operation process is simple and easy to implement.

It should be further noted that the distributed system log query program of the present application may be described by using a program module having the same function according to different functions implemented by each part thereof. Please refer to FIG. 2 , which is a schematic diagram of a program module of a distributed system log query program in an embodiment of the electronic device of the present application. In this embodiment, the distributed system log query program may be divided into the obtaining module 201, the analyzing module 202, and the query module 203 according to different functions implemented by the respective parts. As can be seen from the above description, the program module referred to in the present application refers to a series of computer program instruction segments capable of performing a specific function, and is more suitable than the program to describe the execution process of the distributed system log query program in the electronic device 10. The functions or operational steps implemented by the modules 201 to 203 are similar to the above, and are not described in detail herein, by way of example, for example:

The obtaining module 201 is configured to obtain, in real time, a generation time of a corresponding log of each application in the distributed system and a storage address of the log in a predetermined log storage file, and generate a mapping between the acquired log generation time and the storage address. Relationship, storing the mapping relationship in a predetermined database;

The analyzing module 202 is configured to analyze the query parameter and the mapping relationship according to a predetermined log query rule after receiving a log query instruction with a query parameter sent by the client, and determine a log generation time that matches the query time. a storage address of the corresponding log, where the query parameter includes the query time;

The query module 203 is configured to obtain a log stored in the determined storage address, traverse the obtained log based on the query keyword, query a preset type keyword that matches the query keyword, and match the preset The log corresponding to the type keyword is returned to the client, and the query parameter further includes a query keyword, and the log further includes a preset type keyword.

In addition, the present application also provides a distributed system log query method. Referring to FIG. 3, the distributed system log query method includes the following steps:

In step S301, the generation time of the corresponding log of each application in the distributed system and the storage address of the log in the predetermined log storage file are obtained in real time, and the mapping relationship between the acquired log generation time and the storage address is generated. Storing the mapping relationship in a predetermined database;

Step S302, after receiving the log query instruction with the query parameter sent by the client, analyzing the query parameter and the mapping relationship according to the predetermined log query rule, and determining the log generation time corresponding to the query time. a storage address of the log, where the query parameter includes the query time;

And if the obtained log generation time is greater than the query time, the initial query address is set as the initial storage address, and the end query address is defined as the intermediate storage address;

Step S303: Acquire a log stored in the determined storage address, traverse the obtained log based on the query keyword, and query a preset type keyword that matches the query keyword, and match the preset type key. The log corresponding to the word is returned to the client, and the query parameter further includes a query keyword, and the log includes a preset type keyword.

It can be seen from the above facts that the distributed system proposed by the present application stores the log generation time in the predetermined database and the storage relationship between the log and the storage address in the predetermined log storage file; After the log query command with the query parameter is sent, the query parameter and the mapping relationship are analyzed according to a predetermined log query rule, and the storage address of the log matching the query time is determined, and the query parameter includes the The query time includes the log generation time, the log stored in the determined storage address, the log obtained by the query keyword traversal, and the preset type keyword matching the query keyword, and Returning the log corresponding to the matched preset type keyword to the client, the query parameter further includes a query keyword, and the log further includes a preset type keyword. The occupancy rate of the host resources in the log query process is saved, the query efficiency is improved, and the operation process is simple and easy to implement.

In addition, the present application further provides a computer readable storage medium on which a distributed system log query program is stored, and when the distributed system log query program is executed by the processor, the following operations are implemented:

The specific embodiment of the computer readable storage medium of the present application is substantially the same as the foregoing embodiments of the electronic device and the distributed system log query method, and is not described herein.

The serial numbers of the embodiments of the present application are merely for the description, and do not represent the advantages and disadvantages of the embodiments.

Through the description of the above embodiments, those skilled in the art can clearly understand that the foregoing embodiment method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be through hardware, but in many cases, the former is better. Implementation. Based on such understanding, the technical solution of the present application, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a number of instructions for causing a terminal device (which may be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to perform the methods described in various embodiments of the present application.

The above is only a preferred embodiment of the present application, and is not intended to limit the scope of the patent application, and the equivalent structure or equivalent process transformations made by the specification and the drawings of the present application, or directly or indirectly applied to other related technical fields. The same is included in the scope of patent protection of this application.

Claims

An electronic device, comprising: a memory, and a processor coupled to the memory, the processor configured to execute a distributed system log query program stored on the memory, the distributed system The log query program is implemented by the processor to implement the following steps:

A1. The real-time acquisition of the log generation time of each application in the distributed system and the storage address of the log in the predetermined log storage file, and the mapping relationship between the acquired log generation time and the storage address is generated. The mapping relationship is stored in a predetermined database;

After receiving the log query command with the query parameter sent by the client, analyzing the query parameter and the mapping relationship according to the predetermined log query rule, and determining the log corresponding to the log generation time that matches the query time. Storage address, the query parameter includes the query time;

A3: Obtain a log stored in the determined storage address, traverse the obtained log based on the query keyword, query a preset type keyword that matches the query keyword, and match the preset type keyword. The corresponding log is returned to the client, and the query parameter further includes a query keyword, and the log includes a preset type keyword.
The electronic device of claim 1, wherein the predetermined log query rule comprises:

If the log generation time that matches the query time is searched from the predetermined database, the log corresponding to the log generation time is determined according to the mapping relationship between the log generation time and the storage address. Storage address

And if the log generation time that matches the query time is not found in the predetermined database, the index of the storage address of the predetermined log storage file is generated according to a predetermined index generation rule;

And storing, according to the index, the storage address of the predetermined log storage file, and querying a storage address of a log corresponding to the log generation time that matches the query time.
The electronic device according to claim 2, wherein the index comprises an initial query address and an end query address, and the predetermined index generation rule comprises:

Obtaining an initial storage address and an ending storage address of the predetermined log storage file, and calculating an intermediate storage address of the initial storage address and the ending storage address;

Acquiring the log stored in the intermediate storage address, and determining the size relationship between the log generation time and the query time corresponding to the obtained log;

If the generated log generation time is greater than the query time, the initial query address is set as the initial storage address, and the end query address is defined as the intermediate storage address;

If the obtained log generation time is less than the query time, the initial query address is set as the intermediate storage address, and the end query address is set as the end storage address.
The electronic device according to claim 1, wherein the step of acquiring a log generation time in the distributed system and a storage address of the log in a predetermined log storage file comprises:

Constructing a controller interface on a predetermined control center of the distributed system based on the springwebmvc architecture;

Sending a call log request to the controller interface;

Receiving, by the controller interface, a log generation time in the distributed system collected by a preset type log collection system pre-installed on each server of the distributed system, and the log is in a predetermined log storage file The storage address in .
The electronic device according to claim 1, wherein the preset type keyword comprises an operation keyword and a service keyword, and the query keyword comprises an operation keyword and a business keyword.
The electronic device according to claim 2, wherein the preset type keyword comprises an operation keyword and a service keyword, and the query keyword comprises an operation keyword and a business keyword.
The electronic device according to claim 3, wherein the preset type keyword comprises an operation keyword and a service keyword, and the query keyword comprises an operation keyword and a business keyword.
The electronic device according to claim 4, wherein the preset type keyword comprises an operation keyword and a service keyword, and the query keyword comprises an operation keyword and a business keyword.
A distributed system log query method, characterized in that the method comprises the following steps:

S1. The real-time acquisition of the log generation time of each application in the distributed system and the storage address of the log in the predetermined log storage file, and the mapping relationship between the acquired log generation time and the storage address is generated. The mapping relationship is stored in a predetermined database;

S2: After receiving the log query instruction with the query parameter sent by the client, analyzing the query parameter and the mapping relationship according to the predetermined log query rule, and determining a log corresponding to the log generation time that matches the query time. Storage address, the query parameter includes the query time;

S3: Obtain a log stored in the determined storage address, traverse the obtained log based on the query keyword, query a preset type keyword that matches the query keyword, and match the preset type keyword. The corresponding log is returned to the client, and the query parameter further includes a query keyword, and the log includes a preset type keyword.
The distributed system log query method according to claim 9, wherein the predetermined log query rule comprises:

If the log generation time that matches the query time is searched from the predetermined database, the log corresponding to the log generation time is determined according to the mapping relationship between the log generation time and the storage address. Storage address

And if the log generation time that matches the query time is not found in the predetermined database, the index of the storage address of the predetermined log storage file is generated according to a predetermined index generation rule;

And storing, according to the index, the storage address of the predetermined log storage file, and querying a storage address of a log corresponding to the log generation time that matches the query time.
The distributed system log query method according to claim 9, wherein the index includes an initial query address and an end query address, and the predetermined index generation rule includes:

Obtaining an initial storage address and an ending storage address of the predetermined log storage file, and calculating an intermediate storage address of the initial storage address and the ending storage address;

Acquiring the log stored in the intermediate storage address, and determining the size relationship between the log generation time and the query time corresponding to the obtained log;

If the generated log generation time is greater than the query time, the initial query address is set as the initial storage address, and the end query address is defined as the intermediate storage address;

If the obtained log generation time is less than the query time, the initial query address is set as the intermediate storage address, and the end query address is set as the end storage address.
The method for querying a distributed system log according to claim 9, wherein the step of obtaining a log generation time in the distributed system and a storage address of the log in a predetermined log storage file comprises:

Constructing a controller interface on a predetermined control center of the distributed system based on the springwebmvc architecture;

Sending a call log request to the controller interface;

Receiving, by the controller interface, a log generation time in the distributed system collected by a preset type log collection system pre-installed on each server of the distributed system, and the log is in a predetermined log storage file The storage address in .
The distributed system log query method according to claim 9, wherein the preset type keyword comprises an operation keyword and a service keyword, and the query keyword comprises an operation keyword and a service keyword.
The distributed system log query method according to claim 10, wherein the preset type keyword comprises an operation keyword and a service keyword, and the query keyword comprises an operation keyword and a service keyword.
The distributed system log query method according to claim 11, wherein the preset type keyword comprises an operation keyword and a service keyword, and the query keyword comprises an operation keyword and a service keyword.
The distributed system log query method according to claim 12, wherein the preset type keyword comprises an operation keyword and a service keyword, and the query keyword comprises an operation keyword and a service keyword.
A computer readable storage medium storing a distributed system log query program, the distributed system log query program being executable by at least one processor to cause the at least one processor to execute as follows step:

The real-time acquisition of the log generation time of each application in the distributed system and the storage address of the log in the predetermined log storage file, and the mapping relationship between the acquired log generation time and the storage address is generated. The mapping relationship is stored in a predetermined database;

After receiving the log query instruction with the query parameter sent by the client, analyzing the query parameter and the mapping relationship according to the predetermined log query rule, and determining the storage of the log corresponding to the log generation time that matches the query time. An address, the query parameter includes the query time;

Obtaining a log stored in the determined storage address, traversing the obtained log based on the query keyword, and querying a preset type keyword that matches the query keyword, and matching the matching preset type keyword The log is returned to the client, and the query parameter further includes a query keyword, and the log includes a preset type keyword.
The computer readable storage medium of claim 17, wherein the predetermined log query rule comprises:

If the log generation time that matches the query time is searched from the predetermined database, the log corresponding to the log generation time is determined according to the mapping relationship between the log generation time and the storage address. Storage address

And if the log generation time that matches the query time is not found in the predetermined database, the index of the storage address of the predetermined log storage file is generated according to a predetermined index generation rule;

And storing, according to the index, the storage address of the predetermined log storage file, and querying a storage address of a log corresponding to the log generation time that matches the query time.
The computer readable storage medium according to claim 18, wherein said preset type keyword comprises an operation keyword and a business keyword, said query keyword comprising an operation keyword and a business keyword .
The computer readable storage medium of claim 17, wherein the step of obtaining a log generation time in the distributed system and a storage address of the log in a predetermined log storage file comprises:

Constructing a controller interface on a predetermined control center of the distributed system based on the springwebmvc architecture;

Sending a call log request to the controller interface;

Receiving, by the controller interface, a log generation time in the distributed system collected by a preset type log collection system pre-installed on each server of the distributed system, and the log is in a predetermined log storage file The storage address in .