Factor Group

The next trace and log analysis pattern name is borrowed from factor groups in mathematics (or quotient groups65). Here a group is, of course, not a mathematical group66 but just a group (or set) of log messages or trace statements. However, every trace message has variable and invariant parts (Volume 6, page 251). Variable parts usually contain some values, addresses or status bits. They can even be string values. Such values form a set too and can be partitioned into disjoint (non-overlapping) subsets. For example, a window foreground status can be either TRUE or FALSE. And we can group messages into disjoint factor groups each one having either only true or only false foreground status. The following trace graph illustrates a WindowHistory6467 log where it was reported that one window was periodically loosing and gaining focus:

images

We found messages related to the reported process window title. By using Density Distribution (page 335) pattern another such group of messages was found for another process window. Then a factor group was formed with two subgroups and their Relative Density (page 302) was compared. For correlated alternating values it was expected to be 1. This was a very simple case, of course, which was analyzed just by looking at a textual log but in more complex cases computer assistance is required. A member of a factor group can also be generalized as a message subset with messages having variable part values from some domain subset or even calculated from it (some sort of a predicate): Mi = { m | P(m) }, where the original group of messages is a disjoin union of such message subsets: M = U Mi.


65 http://en.wikipedia.org/wiki/Quotient_group

66 http://en.wikipedia.org/wiki/Group_(mathematics)

67 http://support.citrix.com/article/CTX109235

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset