公开(公告)号：US11457029B2

公开(公告)日：2022-09-27

申请号：US15033144

申请日：2013-12-14

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Eran Samuni ,  Daniel Adrian ,  Yohay Golan

IPC: H04L29/06 ,  H04L9/40 ,  G06F11/00

Abstract: In one example implementation, a log analysis system can comprise an activity engine to monitor user activity of a computer system, a baseline engine to generate an expected baseline of a log, and an abnormality engine to compare the log to the expected baseline to identify an abnormality, compare the abnormality to a user activity volume based on a correlation between the user activity volume and the log activity, and classify the log.