专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明申请

US20170187734A1 SYSTEM AND METHOD FOR FIELD EXTRACTION OF DATA CONTAINED WITHIN A LOG STREAM 有权
公开(公告)号：US20170187734A1
公开(公告)日：2017-06-29
申请号：US14980086
申请日：2015-12-28
申请人： International Business Machines Corporation
发明人： Tien Hiong Lee , Konstantin Levinski , XIN QIAN , Harjoben Singh , Weng Sing Tang
IPC分类号： H04L29/06 , G06N99/00 , G06F11/14
CPC分类号： H04L63/1425 , G06F11/1446 , G06F17/20 , G06F2201/805 , G06N99/005 , H04L63/1416
摘要： Embodiments of the present invention disclose populating a database by conducting a training phase to analyze training security log streams. A server extracts the words contained within the training security log and replaces each of the extracted words with a symbol to form a symbol string and an n-gram scan is conducted on the symbol string to generate statistical data. Tokens are extracted from symbol string, where the tokens are words, phrase or alphanumeric sequence represented by a symbol within training security log stream. The symbol string is replaced with the words they represent to allow for the identification of the actual token phrases. A scan is conducted on the token phrase to acquire scan data on the identified token phrases. Once the tokens, position information, and scan data are known they are stored within the database to allow security log streams to be analyzed in real time.

22. 发明授权

US09684707B1 Visualization of graphical representations of log files 有权
公开(公告)号：US09684707B1
公开(公告)日：2017-06-20
申请号：US15259221
申请日：2016-09-08
申请人： International Business Machines Corporation
发明人： Tien Hiong Lee , Konstantin Levinski , Weng Sing Tang , Liang Zhu
IPC分类号： G06F17/30
CPC分类号： G06F17/30601 , G06F17/30091 , G06F17/30572
摘要： A computer-implemented method includes receiving one or more log files. Each of the one or more log files includes one or more logs. The computer-implemented method further includes extracting one or more event records from said one or more logs. The computer-implemented method further includes, for each event record of the one or more event records, determining one or more attributes and one or more dimensions based on the event record, respectively. The computer-implemented method further includes grouping the one or more event records into one or more attribute groups. The computer-implemented method further includes ordering the one or more event records of each of the one or more attribute groups by the one or more dimensions. The computer-implemented method further includes generating one or more graphical representations of the one or more attribute groups. A corresponding computer system and computer program product are also disclosed.

23. 发明授权

US09519698B1 Visualization of graphical representations of log files 有权
标题翻译：可视化日志文件的图形表示
公开(公告)号：US09519698B1
公开(公告)日：2016-12-13
申请号：US15070157
申请日：2016-03-15
申请人： International Business Machines Corporation
发明人： Tien Hiong Lee , Konstantin Levinski , Weng Sing Tang , Liang Zhu
IPC分类号： G06F17/30
CPC分类号： G06F17/30601 , G06F17/30091 , G06F17/30572
摘要： A computer-implemented method includes receiving one or more log files. Each of the one or more log files includes one or more logs. The computer-implemented method further includes extracting one or more event records from said one or more logs. The computer-implemented method further includes, for each event record of the one or more event records, determining one or more attributes and one or more dimensions based on the event record, respectively. The computer-implemented method further includes grouping the one or more event records into one or more attribute groups. The computer-implemented method further includes ordering the one or more event records of each of the one or more attribute groups by the one or more dimensions. The computer-implemented method further includes generating one or more graphical representations of the one or more attribute groups. A corresponding computer system and computer program product are also disclosed.
摘要翻译：计算机实现的方法包括接收一个或多个日志文件。一个或多个日志文件中的每一个包括一个或多个日志。计算机实现的方法还包括从所述一个或多个日志提取一个或多个事件记录。计算机实现的方法还包括对于一个或多个事件记录的每个事件记录，分别基于事件记录确定一个或多个属性和一个或多个维度。计算机实现的方法还包括将一个或多个事件记录分组成一个或多个属性组。计算机实现的方法还包括通过一个或多个维度排序一个或多个属性组中的每一个的一个或多个事件记录。计算机实现的方法还包括生成一个或多个属性组的一个或多个图形表示。还公开了相应的计算机系统和计算机程序产品。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式