5 Ways Log Analysis Augments APM
September 16, 2014

Gal Berg
XpoLog

Share this

While Application Performance Management (APM) is a vital tool to ensure application availability and performance, analysis of log data can augment APM to monitor, manage and optimize application performance.

From infrastructure, OS and web logs to home grown application logs and 3rd party software logs, you can extract valuable insights – using log analysis technology – that will help you better understand, measure and support your APM strategy.

The following are 5 ways log analysis can deliver results beyond APM tools:

1. Outlining the Steps in the Transaction Flow

The transaction flow of an application service is a set of interactions between the many components that enable that service. When a component fails in the transaction flow, it sets off a chain reaction of failures. This chain reaction can involve multiple steps across the environment, and other clouds, data centers and software components. You need to be able to efficiently analyze all of these many steps – and potential failure points – in the transaction flow, to identify the original component failure.

An ideal log analysis tool will enable you to identify – and even automatically collect – all the log events generated by a specific transaction flow. Once you have identified each log event type, it is very easy to collect all the information and investigate what happened. Each log event can provide insight into exactly what happened. You can see the chain of events, in chronological order, empowering you to track back through history to the root cause problem.

2. Determining the Root Cause of the Bottleneck

Bottlenecks are symptoms of an application performance problem, not the root cause. While APM tools can quickly identify a bottleneck, this is merely an indication that something went wrong. To fix the problem, you need to find the underlying cause of the bottleneck.

Bottlenecks in the transaction flow can be caused by a variety of factors. There are many breaking points where something can go wrong – infrastructure, software or within the application itself. In log files, you can find clues to what actually happened to cause the bottleneck.

If a single component within the transaction flow fails, this can start a bottleneck. When this occurs, a log analysis tool will enable you to see log events either from that specific component or from a component that interfaces with the failed component. These log events indicate where the problem lies.

For example, if a database fails, you will see a variety of bottlenecks across multiple transactions. This will trigger many logs with JDBC exceptions or data source exceptions across multiple sources. If you understand the messages within the logs – such as "database connection failed" or "out of memory exception" – you can determine the root cause of the bottleneck.

3. Detecting Configuration Changes

Configuration changes can have a significant negative impact on an application service. For example, configuration changes can introduce damaging infrastructure faults or application bugs. While a change may manifest as an application performance issue that you can identify, you need to discover the change that triggered this problem.

In these cases, it is challenging for APM tools to uncover the root cause of the problem because a configuration change does not directly create the problem. The change introduces a separate factor that causes the problem.

In order to fix the problem, you need to identify what was changed, and the effects of that change. Using log analysis, you can identify the original configuration change. Logs contain diagnostics information regarding failures and changes that happen during events. Leveraging these vital records, log analysis provides you with visibility into changes that happen on the application, infrastructure and configuration level.

4. Gaining Visibility into Stress

Stress on components in the transaction flow can cause application failures, so it is important to understand the impact of stress. With APM tools, you can see certain levels of load, but measuring load is not enough. You need broader visibility.

You need to look at what the application is doing semantically. Understanding stress is not only the number of threads that a server opens, or the number of transactions that the user is calling. Stress is something that eventually puts a tremendous load on the computation level, on the memory, on infrastructure resources.

A near real-time trend analysis dashboard – delivering valuable data gained from logs – will help you quickly identify potential events and growing trends that will become future problems. The dashboard can provide visibility into the stress on the application, not only from number of transactions, load, calls and logins. It also provides information on the number of complex queries the system is running right now; the average cost of each query; if the system is running a difficult cryptographic computation; the number of cryptographic computations, and so on. This provides visibility into which components are experiencing more stress over time, leading to potential performance issues.

5. Identifying Butterfly Events

Log analysis enables you to proactively search for "butterfly events" – mysterious events caused by an unexpected and complex chain reaction. The original cause of a butterfly event can be anything, and it is not clearly identifiable through traditional APM tools. Butterfly events are hard to find because there are millions of events out there and you don't know what to look for.

The right log analysis solution will show if an event occurred in the past; the first time the event happened; if an event disappeared from the system; and ultimately, if an event has meaning for the system, application or infrastructure. By scanning all log data silos, you can catch obscure events that may ultimately have an impact on the transaction flow. You can be proactive, and find and fix the problem before the chaotic nature of the environment translates into business chaos.

Using log analysis, you will be able to identify log patterns that have an impact on application performance, optimize your APM strategy, and drive better and faster APM results.

Share this

The Latest

April 28, 2017

Today 96 percent of organizations have Digital Transformation initiatives on their roadmap and more than half of those initiatives are in process now. However, there is a major disconnect between user expectations and what IT can deliver, and it is hindering innovation, according to a new survey by Veeam ...

April 27, 2017

According to the tenth annual State of the Network study from Viavi, nearly 90 percent of respondents say they are involved in troubleshooting security-related issues, with 80 percent reporting the time consumed by these issues has increased in the past year ...

April 25, 2017

While the idea of shifting toward digital business was speculative for most CEOs a few years ago, it has become a reality for many in 2017. 47 percent of CEOs are being challenged by the board of directors to make progress in digital business, and 56 percent said that their digital improvements have already improved profits ...

April 24, 2017

The Internet of Things (IoT) is increasingly present in our daily lives, at work, in the home and in the public sphere, making the world a more connected place. In fact, 2020 will see at least 20 billion connected devices across the globe. So, let's take a look at the most common iterations of the IoT at the moment, and what we can expect to see in the IoT landscape over the next 5 years ...

April 21, 2017

In the spirit of Earth Day, which is Saturday, April 22, we recently asked IT professionals for the tips and tricks they're using to help keep their data centers as green as possible. Here are a few ideas inspired by the responses we got ...

April 20, 2017

Almost One-Third (28 percent) of IT workers surveyed fear that cloud adoption is putting their job at risk, according to a survey conducted by ScienceLogic ...

April 19, 2017

A majority of senior IT leaders and decision-making managers of large companies surveyed around the world indicate their organizations have yet to fully embrace the aspects of IT Transformation needed to remain competitive, according to a new study conducted by Enterprise Strategy Group (ESG) ...

April 18, 2017

The move to cloud-based solutions like Office 365, Google Apps and others is one of the biggest fundamental changes IT professionals will undertake in the history of computing. The cost savings and productivity enhancements available to organizations are huge. But these savings and benefits can't be reaped without careful planning, network assessment, change management and continuous monitoring. Read on for things that you shouldn't do with your network in preparation for a move to one of these cloud providers ...

April 17, 2017

One of the most ubiquitous words in the development and DevOps vocabularies is "Agile." It is that shining, valued, and sometimes elusive goal that all enterprises strive for. But how do you get there? How does your organization become truly Agile? With these questions in mind, DEVOPSdigest asked experts across the industry — including analysts, consultants and vendors — for their opinions on the best way for a development or DevOps team to become more Agile ...

April 12, 2017

Is composable infrastructure the right choice for your IT environment? The following are 5 key questions that can help you begin to explore the capabilities of composable infrastructure and its applicability within your own IT environment ...