Abstract:
PROBLEM TO BE SOLVED: To provide a technique for enabling a trace system to display access timing to a file.SOLUTION: A state display device comprises: input means which receives input of a measurement file including file information indicating a file in a measurement target, access information indicating access to the file, and its time information; and display means which displays a state of the measurement target on the basis of the measurement file input to the input means. A state display system comprises: measurement means which generates a measurement file including a file information indicating a file, access information indicating access to the file, and its time information on the basis of state change of a measurement target; and display means which displays a state of the measurement target on the basis of the measurement file generated by the measurement means.
Abstract:
A logging system includes an event receiver and a storage manager. The receiver receives log data, processes it, and outputs a data "chunk." The manager receives data chunks and stores them so that they can be queried. The receiver includes buffers that store events and a metadata structure that stores metadata about the contents of the buffers. The metadata includes a unique identifier associated with the receiver, the number of events in the buffers, and, for each "field of interest," a minimum value and a maximum value that reflect the range of values of that field over all of the events in the buffers. A chunk includes the metadata structure and a compressed version of the contents of the buffers. The metadata structure acts as a search index when querying event data. The logging system can be used in conjunction with a security information/event management (SIEM) system.
Abstract:
PROBLEM TO BE SOLVED: To provide a storage control program for improving the reliability of patrol, a storage control apparatus and a storage control method. SOLUTION: The storage control program allows a computer to execute a collection step for collecting valid area discrimination information indicating whether a plurality of respective storage areas are valid areas or invalid areas, and time stamp information accessed from the whole of respective storage areas, from the respective storage areas and a data copy step for copying data from the storage area storing the oldest stamp information out of the valid areas to the storage area storing the oldest time stamp out of the invalid areas on the basis of the collected valid area discrimination information and time stamp information of respective storage areas, updating the time stamp information of the copying source and the copied destination, updating the valid area identification information of the copying source storage area to information indicating an invalid area, and updating the valid area discrimination information of the copied storage area to information indicating a valid area. COPYRIGHT: (C)2009,JPO&INPIT