193 results about "Event (computing)" patented technology

Certain aspects provide techniques and apparatus for executing queries in a computing system using machine learning models. An example method generally includes receiving a plan to satisfy a request in the computing system and event log data associated with execution of the plan. The plan generally specifies a first plurality of function calls at a first level of granularity. Using a plan refinement machine learning model, a refined plan is generated when the event log data indicates that execution of the generated plan results in one or more execution errors and the one or more execution errors are solvable. Generally, the refined plan specifies a second plurality of function calls at a second level of granularity, the second level of granularity being finer than the first level of granularity.

A computer-implemented method, computer program product and computing system for defining a formatting script for use with a Generative AI Model; receiving a plurality of notifications of a security event, wherein each of the plurality of notifications includes a computer-readable language portion that defines one or more specifics of the security event, thus defining a plurality of computer-readable language portions; processing at least a portion of each of the plurality of computer-readable language portions using the Generative AI Model and the formatting script to summarize each of the computer-readable language portions and generate a plurality of event summaries; and′ processing at least a portion of each of the plurality of event summaries using the Generative AI Model and the formatting script to summarize the plurality of event summaries and generate a summarized human-readable report.

A system and method for initiating remediation actions in a computing environment based on similar incident detection is presented. The method includes: generating a first incident record, based on a correlated plurality of event records, each event record indicating an event in a computing environment; generating a first vector based on the first incident record; detecting a similar incident record based on the first vector and a corresponding vector of the similar incident record; detecting a remediation action associated with the similar incident record, the remediation action previously executed in the computing environment; generating an adapted remediation action based on data extracted from the first incident record; and initiating the adapted remediation action in the computing environment.

Examples of the present disclosure describe systems and methods for automating the identification of events in a text file. In examples, a computing system identifies a subset of a text file that comprises an unknown event using a set of rules. Each rule of the set of rules specifying a first pattern of characters is compared to the subset of the first text file. When the set of rules does not identify the unknown event, the subset of the text file is provided to a language model to generate a new rule with a second pattern of characters and an identifier of the new rule. The system then generates an updated set of rules by adding the new rule to the set of rules.

Certain aspects provide techniques and apparatus for executing queries in a computing system using machine learning models. An example method generally includes receiving a plan to satisfy a request in the computing system and event log data associated with execution of the plan. The plan generally specifies a first plurality of actions to be performed by the computing system at a first level of granularity. Using a plan refinement machine learning model, a refined plan is generated when the event log data indicates that execution of the generated plan results in one or more execution errors and the one or more execution errors are solvable. Generally, the refined plan specifies a second plurality of actions to be performed by the computing system at a second level of granularity, the second level of granularity being finer than the first level of granularity.

A data platform monitors a compute environment by performing multi-stage heuristic analysis of event data representing a plurality of events occurring within the environment. The platform utilizes multiple event analyzers, each configured according to a distinct analysis heuristic, to evaluate different subsets of the event data and generate corresponding output signals. A higher-level event analyzer applies a further heuristic to the multiple output signals to generate a composite alert signal, indicating whether the combination of analyzed events collectively represents a security intrusion or other anomalous condition of sufficient severity to warrant alerting. Based on the composite alert signal, the platform performs an alert-based operation, such as generating a user-facing alert, initiating an automated mitigation, or updating a contextual model of system behavior. By combining the analytical outputs of heterogeneous heuristics, the disclosed architecture enhances the accuracy and contextual relevance of automated intrusion detection within complex computing environments.

A system and method for ingesting delayed logs for cybersecurity detection is presented. The method includes detecting a resource deployed in a computing environment, the resource configured to generate a local log on a disk of the resource; periodically fetching the local log from the disk, the local log including a plurality of event records written by at least a software application executed on the resource; applying a control on the fetched local log; and detecting a cybersecurity issue on the resource based on a result of applying the control.

Systems and methods include an Information Handling System (IHS) that is adapted to diagnose root causes of issues reported by hardware and / or software of the IHS. Telemetry is monitored that specifies operating status information for hardware components of the IHS. Stress event are detected that are related to the hardware components. One or more stress tests are identified for evaluation of each hardware component that is related to stress event. While monitoring the telemetry, the stress tests are conducted in order to replicate the detected stress event. When the detected stress event is replicated, a root cause hardware component of the IHS is determined based on machine learning evaluation of the telemetry generated during replication of the stress event.

A targeted event monitoring and alert service may be implemented by a computing system. The system can provide a live dashboard on a graphical user interface for a respective user. The live dashboard can provide (i) real-time, localized contextual information of an event for a location corresponding to the respective user, and (ii) a set of real-time risks to the property of the respective user. The computing system executes an engagement monitor comprising a machine learning computer model to (i) monitor the respective user's interactions with the live dashboard, and (ii) dynamically adapt content flows of the live dashboard based on learned response information corresponding to the respective user's interactions with the targeted event monitoring and alert service.

Provided herein are systems and methods for methods for detecting expected reductions of interactions across sessions. A computing system can identify event data identifying interactions by a user with a first session for digital therapeutic content to address a condition. The computing system can apply the event data to a machine learning (ML) model. The computing system can generate a likelihood of the user interacting with a second session for digital therapeutic content based on applying the event data to the ML model. The computing system can detect an expected reduction in interactions by the user with the second session, responsive to the likelihood of the user not satisfying a threshold. The computing system can provide an output for the user based on detecting the expected reduction in interactions. In this manner, the efficacy of the medication that user is concurrently taking to address the condition may be improved.

A computing system comprising one or more computing devices can access a file comprising documentation that includes a textual description and a source code snippet written to comply with a programming language syntax. The computing system can identify the source code snippet. The computing system can generate an executable based on the source code snippet. The computing system can initiate a test process that accesses the executable, the test process causing the executable to cause an event. The computing system can determine that the event is a valid event or an invalid event.

Embodiments include methods and devices for media application function (AF) exposure functionality. Various aspects may include receiving an access configuration message for a service or application provider, the access configuration message including an indication of one or more event types and parameters, one or more exposure levels, and aggregation rules. Various embodiments may include an AF server subscribing other computing devices to event types and parameters for the service or application based on the exposure level of the other computing device.

The invention provides a load diagnosis and processing method and device, electronic equipment, a medium and a program product, which can be applied to the technical field of cloud computing. The method comprises the following steps: acquiring a performance index sequence of at least one candidate application process, and in response to meeting a high-load triggering condition, determining a target process to be diagnosed and generating an abnormal event identifier; obtaining thread resource occupation information of the target process in response to the abnormal event identifier, determining an abnormal thread based on the thread resource occupation information, and obtaining execution stack information corresponding to the abnormal thread; thread features are extracted based on the thread resource occupation information and the execution stack information, and a root cause classification label is determined based on the thread features; and generating processing suggestion information for the target application process based on the root cause classification label.

The invention discloses a kernel process scheduling associated information monitoring method and device, a medium and a product, which are applied to the field of cloud computing, and the method comprises the following steps: tracking a related function of kernel process scheduling to determine a calling condition of the related function; when the process awakening function or the new process awakening function is called, recording awakened process information according to the called related function; and when the process scheduling switching function is called, respectively generating a scheduling time delay record and a preemption event record according to the process scheduling switching function. By tracking the calling condition of the related function, the key event of kernel process scheduling can be obtained in real time, and the system overhead caused by kernel modification or additional tool deployment is avoided. By recording the waken process information, a foundation is laid for the subsequent calculation of the scheduling time delay. By generating the time delay record and the preemption event, the scheduling time delay of the container process can be directly quantified, the resource preemption relationship between the containers can be positioned, and the event record can be directly used for subsequent interference source positioning and automatic disposal.

The invention belongs to the technical field of artificial intelligence middleware and cloud computing task arrangement, and discloses an agent arrangement system and method based on a graph structure and a response type programming technology. Comprising a graph structure construction and compiling unit, a node operation unit, a routing and confluence control unit, a graph signal and event management unit and a response type operation and execution regulation and control unit, and an execution path has integrity and verifiability before deployment through analysis of a service graph, topology verification and confluence supplementation of parallel branches; the nodes trigger execution according to graph signals and write products into a result data area or a shared data area, and the routing and confluence control determines a convergence mode of signal transmission and parallel branches according to a connection predicate and a confluence rule. The event management unit generates a structured event for a node operation state, and the operation regulation and control unit schedules through a leading edge queue and in-transit counting and feeds back a back pressure signal to the upstream when a load changes, so that stable propulsion of a graph structure is realized.

Embodiments are directed to security analysis agents. Events associated with a computing environment may be provided. Prompt fragments may be determined based on the events. A prompt may be generated for a large language model (LLM) based on a prompt template and the prompt fragments such that the prompt fragments may be included in the prompt and provided to the LLM. Actions for evaluating the events may be determined based on the LLM response. These actions may be executed to evaluate the events. Portions of the response that correspond to the prompt fragments may be determined. A performance score may be determined for each prompt fragment based on its corresponding portion of the response such that the prompt may be modified to exclude a portion of the prompt fragments that have a performance score less than a threshold value.

A system and method for cross-entity correlation of software containers in a cloud computing environment is presented. The method includes detecting in a log an event record related to a software container platform utilized in a cloud computing environment; extracting from the event record a software container identifier and a principal identifier; cross-referencing the software container identifier with a unique software container identifier list based at least on the principal identifier; associating in a security database the event record and the unique software container identifier; and applying a control based on the event record and the unique software container identifier.

The invention provides a large model reasoning task processing system and method and a medium, an event encapsulation module encapsulates reasoning task parameters into structured events through a preset event encapsulation rule and stores the structured events into a distributed message queue, asynchronous decoupling of task requests and model instance processing is achieved, and the efficiency of reasoning task processing is improved. And the task concurrent response efficiency is improved. Secondly, the event processing module dynamically allocates matched model instances according to reasoning events in the message queue, resources are called in real time based on event loads, the allocation mode of whole card monopolization or fixed quota of a static resource pool is changed, and the problems of resource fragmentation and scrambling are avoided. And finally, the resource prediction module analyzes historical resource consumption data, event resource demand characteristics and resource consumption data of the model instance, pre-judges the resource demand of the next stage in advance and formulates a resource allocation strategy, so that the computing resources can be elastically expanded and contracted according to the actual demand, and the utilization rate of the computing resources is effectively improved.

A computer-implemented method for a digital security system receives unlabeled event data associated with a computing environment, clusters via an unsupervised machine learning model the unlabeled event data into clusters of unlabeled event data where unlabeled event data in one cluster are more similar to each other than to unlabeled event data in other clusters, selects a respective subset of unlabeled event data for each cluster of unlabeled event data, translates via a large language model artificial neural network each unlabeled event datum in each respective subset of unlabeled event data into a description for the unlabeled event datum, and applies a label via a labeling algorithm to at least one unlabeled event datum in a respective cluster responsive to and representative of the respective description for the unlabeled event datum in the respective subset, thereby transforming the at least one unlabeled event datum to a labeled event datum.

Aspects related to reducing application carbon footprints using predictive load balancing and adaptive process scaling are provided. An adaptive scaling platform may train a delegation model to output event pools based on input of event processing traffic information. The platform may receive event processing traffic information. The platform may generate an event pool using the delegation model. The event pool may comprise tasks required to fulfill event processing requests corresponding to the event processing traffic information and indicators of applications corresponding to the plurality of tasks. The platform may receive event processing information from a server. The platform may cause, based on the event processing information, an application to identify thread requirements. The computing platform may allocate resources based on the thread requirements. The computing platform may delegate tasks to the threads based on the allocating. The platform may update the delegation model based on monitoring the threads.

The invention provides a game server state monitoring method and system based on cloud computing, and the method comprises the steps: obtaining a player interaction event record and a server resource consumption index of a game server cluster in a preset monitoring period, constructing a multi-dimensional data association structure, carrying out the behavior mode analysis of the player interaction event record, and carrying out the analysis of the behavior mode. Generating a virtual economic flow map and scene interaction thermodynamic distribution, and performing feature extraction on server resource consumption indexes in the virtual economic flow map and the scene interaction thermodynamic distribution to obtain fragmentation features of a memory access sequence and response delay features of a network session; inputting the virtual economic flow atlas, the scene interaction thermodynamic distribution and fragmentation features and the response delay features into a pre-constructed cross-dimension correlation model to perform server load state evaluation, generating a load state evaluation result, generating a resource scheduling instruction according to resource bottleneck positioning information in the load state evaluation result, and performing resource scheduling on the server according to the resource scheduling instruction. And adjusting a computing resource allocation strategy of the game server cluster. According to the method and the device, the accuracy and the effectiveness of server resource scheduling are effectively improved.

A computer-implemented method may be used to establish trustworthiness of an Edge Computing Device. The method may include, at one or more storage devices, storing expected values pertaining to aspects of the Edge Computing Device. The method may further include, at one or more hardware processing devices, receiving the expected values, receiving an Event Log from the Edge Computing Device, extracting actual values from the Event Log, and comparing the actual values with the expected values to determine whether the actual values match the expected values. The method may further include, at one or more communication devices, responsive to determining whether the actual values match the expected values, transmitting an indication of whether the Edge Computing Device is trustworthy.

Aspects of the present disclosure are directed to systems and methods of dynamically generating individualized or personalized times for providing messages over networked environments. The computing system may obtain, for a user device, an event dataset identifying a plurality of interaction times corresponding to a plurality of interactions over an instant time window by a user with an application on the user device to address a condition of the user. The computing system may apply the event dataset to a machine learning (ML) model. The computing system may generate based on applying the event dataset to the ML model, a defined time at which a message is to be provided to the user device during a subsequent time window. The computing system may provide for presentation on the user device to address the condition of the user, the message in accordance with the defined time.

The invention belongs to the field of GPU computing performance testing, and provides a GPU flow scheduling performance measurement method and device.The method comprises the steps that in a pre-established basic execution environment, N null-kernel functions are submitted to a reference flow in sequence, and the reference flow executes the received null-kernel functions and measures the reference execution duration; alternately submitting the N null kernel functions to the first test flow and the second test flow, introducing a cross-flow synchronization event, and measuring the total execution duration; and according to the reference execution duration and the total execution duration, calculating to obtain synchronization time consumption between the streams. According to the method, the influence of a tracking tool and the like on the performance of the measured object is eliminated, the method has obvious advantages in accuracy and stability, high-precision and low-interference GPU scheduling performance measurement is realized, and a quantitative basis is provided for performance optimization of a system during GPU driving and operation.

A method for transmitting event data (21), in particular operator event data and / or status event data, from a field device (2) to a remote computing unit (3), comprising the steps of: generating the event data (21) by means of the field device (2) based on an event; providing an availability signal (22b) indicating the availability of the event data (21) for transmission (32) via a digital communication interface (15) to the remote computing unit (3); and providing the event data (21) for transmission via the digital communication interface (15) to the remote computing unit (3), wherein the event data (21) is provided separately from the availability signal (22b). The method comprises a computer program product, a field device (2) for executing the foregoing method, and a system (1) with the field device (2).

Systems and methods are provided for receiving a selection to add an event invite media overlay to a media content item, receiving content to be added to the event invite media overlay, the content corresponding to an event, and adding to the event invite media overlay, the content corresponding to the event to generate a custom event invite media overlay. The systems and methods further comprise causing display of the custom event invite media overlay on the media content item, receiving at least one user to which to send an invite to the event, and sending, to a second computing device associated with the at least one user, an invite to the event, the invite comprising the custom event invite media overlay and the media content item.

The embodiment of the application relates to the computer technical field, and provides a task execution log processing method and system and a computing device, the method is applied to the computing device carrying an operation and maintenance system, the method comprises the following steps: in response to that a task execution request is received by an execution engine unit, a callback event in a task execution process is monitored through a log processing plug-in; when the callback event is monitored, task execution data is recorded; the task execution data is encapsulated as structured log information; the structured log information is output in real time through a log output unit to replace output content of the log output unit. Based on the scheme, the computing device can embed the log processing plug-in in the operation and maintenance system, capture the callback event generated in the task execution process in real time, obtain the data in the task execution process as the log in the task running, so that the operation and maintenance system can realize the real-time structured output of the log without modifying the architecture, and blind areas of the operation and maintenance system in the task execution process are avoided.

The embodiments of this specification provide a resource scheduling method, an elastic computing system, a computing device, a medium, and a product. The method includes: obtaining resource information of system resources in the elastic computing system and event information of system events in the elastic computing system; aligning the timestamps of the resource information and the event information to construct a time series of system events, wherein the time series includes the timestamp of the system event, the resource information under the timestamp, and the event information under the timestamp; based on the timestamp of the system event, the resource information under the timestamp, and the event information under the timestamp, performing cross-modal time series fusion processing to obtain time series correlation features, and based on the time series correlation features, predicting resource scheduling strategies for future system events; scheduling system resources in the elastic computing system for future system events based on the resource scheduling strategies. By performing cross-modal time series fusion on the time series, it is possible to learn the dynamic change patterns of resource usage and deep semantic information, thereby improving prediction accuracy.

Detection of anomalous computing environment behavior using glucose is described. An anomaly detection system receives glucose measurements and event records during a first time period. Missing events that are missing from the event records during the first time period are identified by processing the glucose measurements using an event engine simulator. An anomaly detection model is generated based on the missing events during the first time period. Subsequently, the anomaly detection system receives additional glucose measurements and additional event records during a second time period. Missing events that are missing from the additional event records during the second time period are identified by processing the additional glucose measurements using the event engine simulator. Anomalous behavior is detected if the identified missing events that are missing from the event records during the second time period are outside a predicted range of missing events of the anomaly detection model.

The present disclosure relates to and provides a method and apparatus for pushing events, and a computing device, a computer-readable storage medium and a computer program product. The method comprises: on the basis of a target model, determining a category of relationship between a first event and each event in a set of candidate events, wherein the category of relationship at least comprises one of identical, similar and unrelated. The method further comprises: on the basis of the determined category of relationship, using the first event to update the set of candidate events. The method further comprises: on the basis of the updated set of candidate events, pushing a plurality of recommended events.