Patent ID: 11928144
Assignee: LOGSHERO LTD.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 15:
16. A computer program product comprising a non-transitory computer readable storage medium storing program code thereon for execution by at least one hardware processor, said program code comprising:
program instructions for calculating a string distance between a textual content of each of a plurality of non-training log messages, in run-time, and a representative string pattern of each of a plurality of clusters of a clustering model targeting a predetermined certain source of messages, wherein said clustering model is constructed during a training phase, using a plurality of training messages which are selected, constructed and adapted to represent non-training messages originated by said predetermined certain source which is targeted for log message analysis during a run-time phase;
program instructions for detecting at least one log message of the plurality of non-training log messages for which the string distance to the representative string pattern of each of the plurality of clusters exceeds a predefined threshold; and
program instructions for generating an alert indicative of the at least one detected log message as at least one suspected anomaly.