公开(公告)号：US08880944B2

公开(公告)日：2014-11-04

申请号：US13677970

申请日：2012-11-15

Applicant: International Business Machines Corporation

Inventor： James E. Carey ,  Matthew W. Markland ,  Philip J. Sanders

IPC: G06F11/00 ,  G06F11/14 ,  G06F11/34

CPC classification number: G06F11/3404 ,  G06F11/1438 ,  G06F11/1471 ,  G06F2201/86

Abstract: Restarting event and alert analysis after a shutdown in a distributed processing system includes identifying a shutdown condition of the distributed processing system; determining whether the shutdown was a planned shutdown or an unplanned shutdown; if the shutdown was planned, storing an identification of the last event in an event log that was injected in an event queue at the time of the planned shutdown and restarting event and alert analysis using the next event identified in the event log; and if the shutdown was unplanned, for each event analyzer, identifying the last event included in the last event pool that the event analyzer closed; and restarting event and alert analysis at the event analyzer using the next event received by the event analyzer after the identified last event.

Abstract translation: 在分布式处理系统中关闭后重新启动事件和警报分析包括识别分布式处理系统的停机状态; 确定关机是计划停机还是计划外关机; 如果计划关闭，则在计划的关闭和重新启动事件时将事件日志中注入的事件日志中存储一个标识，并使用事件日志中标识的下一个事件进行警报分析; 并且如果关闭是计划外的，对于每个事件分析器，识别事件分析器关闭的最后事件池中包括的最后一个事件; 并在事件分析器上使用事件分析器在所识别的最后一个事件之后接收到的下一个事件重新启动事件和警报分析。

公开(公告)号：US08880809B2

公开(公告)日：2014-11-04

申请号：US13663335

申请日：2012-10-29

Applicant: Advanced Micro Devices, Inc.

Inventor： Gabriel Loh ,  James O'Connor

IPC: G06F13/00

CPC classification number: G06F11/3433 ,  G06F11/349 ,  G06F13/1663 ,  G06F2201/86 ,  G06F2201/88

Abstract: Embodiments are described for a method for controlling access to memory in a processor-based system comprising monitoring a number of interference events, such as bank contentions, bus contentions, row-buffer conflicts, and increased write-to-read turnaround time caused by a first core in the processor-based system that causes a delay in access to the memory by a second core in the processor-based system; deriving a control signal based on the number of interference events; and transmitting the control signal to one or more resources of the processor-based system to reduce the number of interference events from an original number of interference events.

Abstract translation: 描述了用于在基于处理器的系统中控制对存储器的访问的方法的实施例，包括监视多个干扰事件，例如银行争用，总线争用，行缓冲器冲突以及由 基于处理器的系统中的第一核心，其导致在基于处理器的系统中由第二核心访问存储器的延迟; 基于干扰事件的数量导出控制信号; 以及将所述控制信号发送到所述基于处理器的系统的一个或多个资源，以从原始数量的干扰事件减少干扰事件的数量。

公开(公告)号：US20140325529A1

公开(公告)日：2014-10-30

申请号：US14327588

申请日：2014-07-10

Applicant: FUJITSU LIMITED

Inventor： Hayato KUBO

IPC: G06F9/54

CPC classification number: G06F9/542 ,  G06F11/3058 ,  G06F11/3093 ,  G06F11/3476 ,  G06F2201/86

Abstract: A present event management method includes: calculating, for each of plural execution intervals that are different each other, a number of events to be executed within a predetermined interval that is equal to or less than a shortest execution interval; reading n data blocks at the predetermined intervals from a storage device that stores, for each of plural events, a data block. “n” is a total number of calculated numbers. The data block is used to execute a corresponding event, and each of the plural events has either of the plural execution intervals. The present event management method further includes outputting an execution request including the read data blocks to an execution unit that executes an event.

Abstract translation: 目前的事件管理方法包括：针对不同于彼此不同的多个执行间隔中的每一个执行在等于或小于最短执行间隔的预定间隔内执行的事件的数量; 从存储装置以预定间隔读取n个数据块，对于多个事件中的每一个存储数据块。 “n”是计算出的数字的总数。 数据块用于执行相应的事件，并且多个事件中的每一个具有多个执行间隔中的任一个。 本事件管理方法还包括将包括读取的数据块的执行请求输出到执行事件的执行单元。

公开(公告)号：US20140325525A1

公开(公告)日：2014-10-30

申请号：US14220249

申请日：2014-03-20

Applicant: Verint Americas Inc.

Inventor： Christopher Schnurr ,  Frank Maurer

IPC: G06F9/48

CPC classification number: G06F9/4806 ,  G06F11/3438 ,  G06F11/3466 ,  G06F11/349 ,  G06F21/552 ,  G06F2201/86

Abstract: A data processing system (1) is programmed with an interface (2) for capturing events which arise, and a process engine (3) for automatically monitoring captured events to identify completion of steps, each comprising a plurality of events linked by dependency relationships; and to identify completion of processes, each comprising a plurality of steps linked by dependency relationships. Software functions (5) execute in response to output of the process engine (3). The process engine (3) processes events to recognise a plurality of potential steps, but terminates other potential steps when completion of a step is determined. The process engine (3) processes steps to recognise a plurality of potential processes, but terminates other potential process when completion of a process is determined. The dependency relationships include Boolean AND operators and Boolean OR operators. There is a discrete start event for each step and a discrete start step for each process. The engine executes a plurality of processes simultaneously, applying captured events in real time to relevant steps, some events being applied to a plurality of steps.

公开(公告)号：US08875158B2

公开(公告)日：2014-10-28

申请号：US13850531

申请日：2013-03-26

Applicant: NEC Laboratories America, Inc.

Inventor： Hui Zhang ,  Junghwan Rhee ,  Guofei Jiang ,  Kenji Yoshihira

IPC: G06F3/00 ,  G06F9/44 ,  G06F9/54

CPC classification number: G06F9/542 ,  G06F11/3466 ,  G06F11/3636 ,  G06F2201/86 ,  G06F2201/865

Abstract: A method for request profiling in service systems with kernel events includes collecting kernel events traces from a target system, the kernel event traces being obtainable from individual service machines by instrumenting core kernel functions, analyzing kernel event traces for constructing end-to-end request profiling traces consisting of kernel events belonging to service processes, and categorizing request traces responsive to the analyzing with the constructing including grouping requests based on marking kernel events used in the analyzing.

Abstract translation: 在具有内核事件的服务系统中请求分析的方法包括从目标系统收集内核事件跟踪，内核事件跟踪可通过测试核心内核功能从各个服务机器获得，分析内核事件跟踪以构建端到端请求分析 由属于服务进程的内核事件组成的跟踪，以及响应于构建分析的分类请求分类，包括基于分析中使用的内核事件的分组请求。

公开(公告)号：US20140317178A1

公开(公告)日：2014-10-23

申请号：US14319218

申请日：2014-06-30

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION

Inventor： Robert J. Purpura

IPC: H04L29/06

CPC classification number: H04L67/42 ,  G06F2201/86 ,  G06F2201/87 ,  G06F2201/875 ,  G06F2201/88 ,  H04L43/16 ,  H04L63/10 ,  H04L63/102 ,  H04L67/22

Abstract: An approach is provided for controlling a rate at which requests from a client computer will be received by a server application executed on a server computer. Requests are received by the server computer at different times from the client computer and time intervals between different pairs of successive requests are measured. Based on the time intervals, (1) a historical rate of requests from the client computer is determined and a limit on a rate for the server application to receive subsequent requests from the client computer is determined and enforced based on the historical rate of requests, or (2) a range of the time intervals is determined to be within a predefined range of time intervals and based on the range being within the predefined range, a denial of service attack or an overload of requests from the client computer is determined and blocked.

Abstract translation: 提供了一种用于控制由服务器计算机上执行的服务器应用程序将接收来自客户端计算机的请求的速率的方法。 服务器计算机在与客户端计算机不同的时间接收请求，并测量不同的连续请求对之间的时间间隔。 基于时间间隔，（1）确定来自客户端计算机的历史请求速率，并根据历史请求速率来确定和执行服务器应用程序接收来自客户端计算机的后续请求的速率限制， 或（2）确定时间间隔的范围在预定义的时间间隔范围内，并且基于该范围在预定范围内，确定并阻止来自客户端计算机的拒绝服务攻击或过载请求 。

公开(公告)号：US08856312B2

公开(公告)日：2014-10-07

申请号：US11722583

申请日：2005-10-26

Applicant: Scot MacLellan ,  Vincenzo Sciacca

Inventor： Scot MacLellan ,  Vincenzo Sciacca

IPC: G06F15/173 ,  G06F11/34

CPC classification number: G06F11/3409 ,  G06F11/3495 ,  G06F2201/81 ,  G06F2201/86 ,  G06F2201/865 ,  G06F2201/87

Abstract: A method for monitoring transaction based systems monitoring their system resource and transaction performance data with thresholds on metrics, said method comprising the steps of collecting system resource data and transaction performance data on a period basis and each time a transaction performance metric is passed, triggering the collection of the system resource and storing an identifier correlating the transaction performance data and the system resource data; merging the collected system resource and transaction performance data; calculating the mean value for each system resource or transaction performance metric of merged data; identifying the metrics for which there is a significant difference between mean value obtained with triggering or without triggering; according to the identified metric mean value, calculating new thresholds of system resource metrics to be used for monitoring.

Abstract translation: 一种用于监视基于事务的系统的方法，其监控其度量阈值的系统资源和事务性能数据，所述方法包括以下步骤：在每个周期基础上收集系统资源数据和事务性能数据，并且每当通过事务性能度量时，触发 收集系统资源并存储与事务性能数据和系统资源数据相关联的标识符; 合并收集的系统资源和事务性能数据; 计算合并数据的每个系统资源或事务性能度量的平均值; 识别通过触发或不触发获得的平均值之间存在显着差异的度量; 根据确定的度量平均值，计算要用于监测的系统资源量度的新阈值。

公开(公告)号：US08856048B2

公开(公告)日：2014-10-07

申请号：US12580023

申请日：2009-10-15

Applicant: Jeffrey A. Calcaterra ,  Andrew L. Hanson ,  Gregory R. Hintermeister ,  Govindaraj Sampathkumar

Inventor： Jeffrey A. Calcaterra ,  Andrew L. Hanson ,  Gregory R. Hintermeister ,  Govindaraj Sampathkumar

IPC: G06F11/34

CPC classification number: G06F11/3447 ,  G06F11/3409 ,  G06F2201/86 ,  G06F2201/875

Abstract: An apparatus, system, and method are disclosed for defining normal usage of a computing system resource. A method for defining normal usage of a computing system resource includes receiving a repeating schedule that represents system usage of one or more computing resources and receiving one or more demand events that will affect the system usage of the one or more computer resources. The method also automatically creates a predictive temporal profile that represents the system usage of the one or more computer resources from information comprising the repeating schedule and the one or more demand events. The predictive temporal profile is displayed for the user to review.

Abstract translation: 公开了一种用于定义计算系统资源的正常使用的装置，系统和方法。 定义计算系统资源的正常使用的方法包括：接收表示一个或多个计算资源的系统使用的重复调度，以及接收将影响所述一个或多个计算机资源的系统使用的一个或多个需求事件。 该方法还自动创建预测性时间特征，其表示来自包括重复调度和一个或多个需求事件的信息的一个或多个计算机资源的系统使用。 显示预测性时间特征供用户查看。

公开(公告)号：US20140298341A1

公开(公告)日：2014-10-02

申请号：US13851618

申请日：2013-03-27

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION

Inventor： Matthew J. DUFTLER ,  Paul T. KEYSER ,  Szabolcs ROZSNYAI

IPC: G06F9/46

CPC classification number: G06F9/46 ,  G06F11/3452 ,  G06F2201/86 ,  G16H50/70

Abstract: Systems and methods for data analysis include correlating event data to provide process instances. The process instances are clustered, using a processor, by representing the process instances as strings and determining distances between strings to form a plurality of clusters. One or more metrics are computed on the plurality of clusters to monitor deviation of the event data.

公开(公告)号：US20140298107A1

公开(公告)日：2014-10-02

申请号：US13853081

申请日：2013-03-29

Applicant: MICROSOFT CORPORATION

Inventor： Robert Dreyfoos ,  Stephan Doll ,  Greg Nichols ,  Robin Giese

IPC: G06F11/30

CPC classification number: G06F11/3093 ,  G06F11/0706 ,  G06F11/0751 ,  G06F11/0784 ,  G06F11/0793 ,  G06F11/3051 ,  G06F2201/86

Abstract: To improve identifying and tracking errors on a computer, an operating system for a computer is programmed to have a framework allowing programmable monitors of events to be defined. These programmable monitors are programmed to detect one or more events or patterns of events, and have associated actions. When the pattern of events occurs, the monitor is triggered, and actions associated with the monitor can be performed. Various actions can be performed, including but not limited to data gathering about the events triggering the monitor, other events occurring during the same time period, and information about the configuration of the computer. Monitors can be dynamically updated remotely during operation of the computer. An operating system can be programmed to have any number of such monitors. Similarly, the actions that occur when a monitor is triggered also can be dynamically updated.

Abstract translation: 为了改善计算机上的识别和跟踪错误，计算机的操作系统被编程为具有允许定义事件的可编程监视器的框架。 这些可编程监视器被编程为检测一个或多个事件或事件模式，并且具有相关联的动作。 当发生事件模式时，监视器被触发，并且可以执行与监视器相关联的动作。 可以执行各种动作，包括但不限于关于触发监视器的事件的数据收集，在相同时间段期间发生的其他事件以及关于计算机的配置的信息。 监视器可以在计算机运行期间远程动态更新。 可以将操作系统编程为具有任何数量的这种监视器。 类似地，监视器触发时发生的动作也可以动态更新。