Method and apparatus for moving data from an extensible markup language format to normalized format
    1.
    发明授权
    Method and apparatus for moving data from an extensible markup language format to normalized format 失效
    将数据从可扩展标记语言格式移动到归一化格式的方法和装置

    公开(公告)号:US07475090B2

    公开(公告)日:2009-01-06

    申请号:US11560168

    申请日:2006-11-15

    IPC分类号: G06F17/00

    摘要: A computer implemented method, apparatus, and computer usable program code for creating normalized data from markup language data. User defined parameters are received for retrieving event data, wherein the parameters define a type of event and a subset of attributes for the type of event. In response to receiving the parameters, a process is configured using the type of event and the subset of attributes for the type of event to form a configured process. A set of records is processed using the configured process, wherein the configured process places data corresponding to each attribute in the subset of attributes for the type of event from the set of records into a table to form the normalized data.

    摘要翻译: 一种用于从标记语言数据创建归一化数据的计算机实现的方法,装置和计算机可用程序代码。 接收用户定义的参数用于检索事件数据,其中参数定义事件类型和事件类型的属性子集。 响应于接收参数,使用事件类型和事件类型的子集来配置进程以形成配置的进程。 使用所配置的进程处理一组记录,其中所配置的进程将对应于属性类型的每个属性的数据从记录集合中放置到表中以形成归一化数据。

    METHOD AND APPARATUS FOR STORING AUDIT EVENT DATA
    2.
    发明申请
    METHOD AND APPARATUS FOR STORING AUDIT EVENT DATA 失效
    存储审核事件数据的方法和装置

    公开(公告)号:US20080114817A1

    公开(公告)日:2008-05-15

    申请号:US11560120

    申请日:2006-11-15

    IPC分类号: G06F17/00

    摘要: A computer implemented method, apparatus, and computer usable program code for processing event data. In response to receiving an event, a size of the event data for the event is compared to a threshold size to form a comparison. The information about an event and event data is stored in a first entry in a main table in a database if the comparison indicates that the size of the event data is one that can be stored in the main table. The information about the event is placed in the first entry in the main table if the size is greater than the threshold size. The event data is stored in a second entry in an overflow table if the size is greater than the threshold size, wherein the entry includes a pointer to the first entry. The main table and overflow table form a live set and hold the current live data.

    摘要翻译: 用于处理事件数据的计算机实现的方法,装置和计算机可用程序代码。 响应于接收事件,将事件的事件数据的大小与阈值大小进行比较以形成比较。 如果比较指示事件数据的大小是可以存储在主表中的大小,则关于事件和事件数据的信息被存储在数据库的主表中的第一条目中。 如果大小超过阈值大小,则有关该事件的信息将放在主表中的第一个条目中。 如果大小大于阈值大小,则事件数据被存储在溢出表中的第二条目中,其中条目包括指向第一条目的指针。 主表和溢出表形成一个活动集并保存当前的实时数据。

    METHOD AND APPARATUS FOR MOVING DATA FROM AN EXTENSIBLE MARKUP LANGUAGE FORMAT TO NORMALIZED FORMAT
    3.
    发明申请
    METHOD AND APPARATUS FOR MOVING DATA FROM AN EXTENSIBLE MARKUP LANGUAGE FORMAT TO NORMALIZED FORMAT 失效
    将数据从可扩展标记语言格式移动到正规格式的方法和装置

    公开(公告)号:US20080114802A1

    公开(公告)日:2008-05-15

    申请号:US11560168

    申请日:2006-11-15

    IPC分类号: G06F17/30

    摘要: A computer implemented method, apparatus, and computer usable program code for creating normalized data from markup language data. User defined parameters are received for retrieving event data, wherein the parameters define a type of event and a subset of attributes for the type of event. In response to receiving the parameters, a process is configured using the type of event and the subset of attributes for the type of event to form a configured process. A set of records is processed using the configured process, wherein the configured process places data corresponding to each attribute in the subset of attributes for the type of event from the set of records into a table to form the normalized data.

    摘要翻译: 一种用于从标记语言数据创建归一化数据的计算机实现的方法,装置和计算机可用程序代码。 接收用户定义的参数用于检索事件数据,其中参数定义事件类型和事件类型的属性子集。 响应于接收参数,使用事件类型和事件类型的子集来配置进程以形成配置的进程。 使用所配置的进程处理一组记录,其中所配置的进程将对应于属性类型的每个属性的数据从记录集合中放置到表中以形成归一化数据。

    Method and apparatus for efficiently storing audit event data having diverse characteristics using tiered tables
    4.
    发明授权
    Method and apparatus for efficiently storing audit event data having diverse characteristics using tiered tables 失效
    使用分层表高效地存储具有不同特征的审计事件数据的方法和装置

    公开(公告)号:US07519610B2

    公开(公告)日:2009-04-14

    申请号:US11560120

    申请日:2006-11-15

    IPC分类号: G06F17/00

    摘要: A computer implemented method, apparatus, and computer usable program code for processing event data. In response to receiving an event, a size of the event data for the event is compared to a threshold size to form a comparison. The information about an event and event data is stored in a first entry in a main table in a database if the comparison indicates that the size of the event data is one that can be stored in the main table. The information about the event is placed in the first entry in the main table if the size is greater than the threshold size. The event data is stored in a second entry in an overflow table if the size is greater than the threshold size, wherein the entry includes a pointer to the first entry. The main table and overflow table form a live set and hold the current live data.

    摘要翻译: 用于处理事件数据的计算机实现的方法,装置和计算机可用程序代码。 响应于接收事件,将事件的事件数据的大小与阈值大小进行比较以形成比较。 如果比较指示事件数据的大小是可以存储在主表中的大小,则关于事件和事件数据的信息被存储在数据库的主表中的第一条目中。 如果大小超过阈值大小,则有关该事件的信息将放在主表中的第一个条目中。 如果大小大于阈值大小,则事件数据被存储在溢出表中的第二条目中,其中条目包括指向第一条目的指针。 主表和溢出表形成一个活动集并保存当前的实时数据。

    Method for shard assignment in a large-scale data processing job
    5.
    发明授权
    Method for shard assignment in a large-scale data processing job 有权
    在大规模数据处理作业中进行分片分配的方法

    公开(公告)号:US09298760B1

    公开(公告)日:2016-03-29

    申请号:US13566793

    申请日:2012-08-03

    IPC分类号: G06F17/30

    CPC分类号: G06F17/30321

    摘要: A method for shard assignment in a large-scale data processing job is provided. Datasets are divided into a plurality of shards and the shards are indexed and aggregated into one or more groups. A worker process is initially assigned an indexed shard from a group. The initial assignment can assigned based on a simple algorithm. The worker's subsequent shard assignment is based on the index of the initially assigned shard.

    摘要翻译: 提供了一种在大规模数据处理作业中进行分片分配的方法。 数据集被分成多个分片,并且分片被索引并聚合成一个或多个分组。 工作进程最初从组中分配了索引的分片。 初始赋值可以基于简单的算法分配。 工作人员随后的分片分配是基于最初分配的分片的索引。