公开(公告)号：US20170010945A1

公开(公告)日：2017-01-12

申请号：US14796289

申请日：2015-07-10

Applicant: Cisco Technology, Inc.

Inventor： Roberto Attias

IPC: G06F11/32 ,  G06F11/34 ,  G06F11/30

CPC classification number: G06F11/328 ,  G06F11/00 ,  G06F11/301 ,  G06F11/3086 ,  G06F11/3409

Abstract: A system, method and computer-readable storage devices for enhancing the presentation of structured log files. A system configured according to this disclosure can track events of a computing entity. The computing entity can be a state machine, a virtual machine, a thread, a process, a software component, or a hardware component. The computing entity can be any device that generates or contributes to an event log. The events can be tracked from at least one of a structured log file and a stream of event data, for example. The system can identify event types for the events. The system can identify relationships between the events, and generate a sequence diagram of the events. The sequence diagram can include visual indications of the relationships based on the event types. The system can further select an icon for each event from an event-specific icon directory based on event type.

Abstract translation: 一种用于增强结构化日志文件呈现的系统，方法和计算机可读存储设备。 根据本公开配置的系统可以跟踪计算实体的事件。 计算实体可以是状态机，虚拟机，线程，进程，软件组件或硬件组件。 计算实体可以是生成或贡献于事件日志的任何设备。 事件可以从结构化日志文件和事件数据流中的至少一个跟踪。 系统可以识别事件的事件类型。 系统可以识别事件之间的关系，并生成事件的序列图。 序列图可以包括基于事件类型的关系的视觉指示。 系统可以根据事件类型进一步从事件特定图标目录中选择每个事件的图标。

公开(公告)号：US20200241992A1

公开(公告)日：2020-07-30

申请号：US16846207

申请日：2020-04-10

Applicant: Cisco Technology, Inc.

Inventor： Roberto Attias

IPC: G06F11/32 ,  G06F11/34 ,  G06F11/30

Abstract: A system, method and computer-readable storage devices for enhancing the presentation of structured log files. A system configured according to this disclosure can track events of a computing entity. The computing entity can be a state machine, a virtual machine, a thread, a process, a software component, or a hardware component. The computing entity can be any device that generates or contributes to an event log. The events can be tracked from at least one of a structured log file and a stream of event data, for example. The system can identify event types for the events. The system can identify relationships between the events, and generate a sequence diagram of the events. The sequence diagram can include visual indications of the relationships based on the event types. The system can further select an icon for each event from an event-specific icon directory based on event type.

公开(公告)号：US10664481B2

公开(公告)日：2020-05-26

申请号：US14869859

申请日：2015-09-29

Applicant: Cisco Technology, Inc.

Inventor： Roberto Attias ,  Alberto Gonzalez Prieto

IPC: G06F16/2457 ,  G06F16/2455 ,  G06F16/17 ,  G06F16/33 ,  G06F16/2458 ,  G06F16/903 ,  G06F16/215 ,  G06F11/34 ,  G06N5/02 ,  G06F17/40 ,  G06F40/211 ,  G06F40/284

Abstract: A data processing method includes receiving a stream of digital data with a plurality of objects and, in response to receiving an object, tokenizing the object to create a tokenized object, and storing the tokenized object in a token database. The method further includes comparing the tokenized object to a plurality of other tokenized objects stored in the token database, computing a pattern associated with the tokenized object, storing the pattern in a pattern database, and managing a size of the pattern database by identifying, a subset of patterns that are eligible for deletion from the pattern database based on an age of each pattern, ranking each pattern of the subset based on a quality and a popularity metric, identifying, based on the ranking and from the subset, a second pattern and deleting the second pattern from the pattern database to produce an updated database.