Patent ID: 8112398
Filing Date: 2012-02-07
Classification: G06F

Abstract:
1. A method for selectively marking and retrieving data from an event log file, the method comprising: providing first syntax for user insertion of at least one bookmark into an event log file associated with a computing system, wherein the event log file records event data pertaining to the computing system, and wherein the event log data in the event log file includes records of executed software applications, records of system audit events, and records of potential security breaches, wherein providing the first syntax includes providing a command that allows a user to introduce a bookmark in the event log file as an information event; in response to receiving the first syntax, inserting the at least one bookmark into the event log file; providing second syntax for retrieving a user-specified portion of the event log file using the at least one bookmark, wherein the second syntax allows the user to retrieve event log data from the event log file having a user-specified relative location with respect to a location of the at least one bookmark in the event log file, wherein the second syntax includes a command that allows the user to retrieve the records of executed software events, the records of system audit events, and the records of security breaches that appear in the event log file before or after the information event; and in response to receiving the second syntax, retrieving the user-specified portion of the event log file.