64 results about "Server log" patented technology

The invention discloses an AI-based network security risk identification and management and control system, which is characterized by comprising network security equipment and a server, the network security equipment is used for monitoring flow data flowing into / out of the server, and the AI-based network security risk identification and management and control system also comprises an interface conversion module which is used for connecting different network security equipment, original operation logs of different network security devices are collected; data collection: collecting multi-source data from multiple channels of network traffic, server logs, application program logs and user behavior records; preprocessing the data; preprocessing the data, removing noise data, filling missing values, and extracting useful features from the original data; simulation training: training the model to identify normal and abnormal behaviors through machine learning by utilizing supervised learning, unsupervised learning or semi-supervised learning methods; the deep neural network is used for modeling a complex data mode, and the detection precision is improved.

The invention relates to the technical field of electrical equipment testing, in particular to an intelligent detection and classification management method and system for IDC equipment, and the method comprises the following steps: collecting the current, voltage, power consumption and temperature of a server in an IDC cabinet, synchronously recording the CPU occupancy rate and the GPU occupancy rate, storing the I / O load and the network throughput rate, extracting server log entries, and storing the server log entries in an equipment exception log library; and obtaining IDC equipment operation state data. According to the invention, by synchronously monitoring the current, voltage, power consumption and temperature of the IDC equipment and collecting the operation data of the server, the new scheme optimizes the comprehensiveness of the data and the real-time performance of the monitoring, and the monitoring strategy provides finer risk assessment and classification management by dynamically analyzing the state fluctuation of the equipment, so that the reliability of the IDC equipment is improved. Therefore, the accuracy of fault prediction and the efficiency of maintenance are improved, the analysis of abnormal logs and operation data is comprehensively utilized, the prediction capability of potential problems is enhanced, and the system downtime rate and the maintenance expenditure are effectively reduced.

The invention discloses an intelligent early warning and decision making system and method based on large model driving. The intelligent early warning and decision making system comprises a server log data layer which is responsible for collecting various log data generated in the operation process of a server; the filtering layer is used for undertaking a task of quickly screening abnormal log information; the retrieval layer is used for matching similar or relevant information in a risk library for each abnormal log; the Agent analysis and decision-making layer is used for carrying out deep analysis on abnormal conditions by utilizing natural language processing and knowledge reasoning capability of an intelligent deep large model so as to identify attack types and formulate personalized defense schemes; the defense layer is responsible for calling a built-in defense tool library to execute a defense scheme; the execution layer is used for converting an instruction of the defense layer into a specific operation automatically executed through a script; the monitoring layer is used for monitoring results in and after scheme execution in real time; the inspection layer is used for automatically inspecting the production line after monitoring is normal; and the analysis layer is used for carrying out automatic chart analysis on attack or risk data. According to the invention, automatic processing from attack detection to system recovery is realized, and the response efficiency is improved.

The invention discloses a log management method and device, and relates to the technical field of medical health and big data. A specific embodiment of the log management method comprises the following steps: in response to a received log acquisition request, acquiring pre-generated client logs and server logs in batches; matching the client logs with the server logs, splicing the successfully matched client logs and server logs into aggregation logs, and storing the aggregation logs in batches; and in response to a received state checking request, determining a client query condition and a server query condition corresponding to the state checking request, and obtaining a target log meeting the client query condition and the server query condition from the aggregated log. According to the embodiment, the client log and the server log which are successfully matched are spliced into the aggregation log, and then the target log meeting the query condition is queried in the aggregation log, so that front-end and back-end operations can be uniformly monitored, comprehensive log information can be quickly and accurately queried, and the log query efficiency is improved.

The invention discloses a server BIOS log transmission method based on function decoupling, and the method comprises the steps: a processor obtains to-be-transmitted log data and corresponding log attributes, determines the log type of the log data based on the log attributes, calls a specified real-time clock, determines the generation timestamp of the log data, and transmits the log data to a server; sending the log data to a baseboard management controller to enable the log data to carry a generation timestamp, calling a log transmission path corresponding to the log type, and sending the log data to the baseboard management controller; the baseboard management controller sorts the high-level logs and the basic logs according to the sequence of the generated timestamps from morning to evening to obtain a global log queue; mapping the log data in the global log queue into a memory through memory mapping, and backing up the log data to a flash memory; and outputting the basic logs in the global log queue to a network console according to the sequence from front to back. According to the method, the conflict between high throughput and starting timeliness in the log transmission process can be effectively solved.

The invention provides a multi-server log collection method, device and system, is applied to the technical field of computers, and provides the scheme for solving the problems of complex wiring and high cost of a log collection mode in the related technology, each server is provided with a first wireless receiving and transmitting module, and the first wireless receiving and transmitting module is provided with a second wireless receiving and transmitting module; a second wireless transceiver module is arranged in the data transmission device of each cabinet, and the data transmission devices are connected with log management equipment. Comprising the following steps: receiving a baseboard management controller system log sent by a first wireless transceiver module on each server in a current cabinet through a second wireless transceiver module of the current cabinet; determining a target data transmission device according to the current load condition; sending the system log of the baseboard management controller to log management equipment through the target data transmission device; the number of wires can be greatly reduced, so that the wiring complexity is reduced, the wiring cost is reduced, and maintenance is easy.

An electronic control device includes a coordination control section configured to implement coordination between a service-system functional block and a control-system functional block. The coordination control section includes a request transfer section transferring the access request transmitted from the service-system functional block to the control-system functional block, a log creation section creating an access log and storing the created access log in a preset first storage section, a statistical log creation section executing a statistical process on execution statuses of a plurality of the access requests, creating a statistical access log, and storing the created statistical access log in a preset second storage section, a statistical transmission section transmitting the statistical access log to a server, a log transmission section transmitting the access log to the server, and a log deletion section configured to delete the access log from the first storage section.

The invention provides a server log document processing method and device, a data storage structure of row storage in a search engine is forbidden, and the method comprises the following steps: receiving a log write-in request; extracting data of a non-text type and a text type according to the attribute information of the target log document; under the condition that first data of a non-text type is extracted, writing a first data field included in the first data into a data storage structure of column storage, and storing a first mapping relationship between the target log document and the first data field; under the condition that the second data of the text type is extracted, establishing a target data index for the second data; and writing a second data field included in the second data into a data storage structure of the column storage, storing a second mapping relationship between the target log document and the second data field, and storing the target data index. By means of the method and device, the problem that the storage efficiency of the server log document is low is solved, and the effect of improving the storage efficiency of the server log document is achieved.

The present application relates to the field of communication technology, and specifically to a login authentication method, a computer device and a storage medium, which are applied to a server, the server is respectively connected to a first terminal and a second terminal in communication, the first terminal is not logged in to a target application, the second terminal is logged in to the target application, the first terminal and the second terminal have a near field communication function, and the login authentication method includes: if a login authentication request sent by the first terminal is monitored, a login authentication code is generated according to the login authentication request; the login authentication code is sent to the first terminal, the first terminal sends the login authentication code to the second terminal through the near field communication function, the second terminal transmits the login authentication code to the server, and the server performs login authentication on the first terminal according to the login authentication code; if the login authentication is successful, the first terminal is authorized to log in to the target application, and the login operation of the application on multiple terminals can be simplified while ensuring the security of the login authentication.

The invention provides a malicious external connection event detection method and device of a host. The method comprises the steps that multiple pieces of destination address information are collected in a server log of the host; the destination address information comprises a destination IP and / or a destination domain name; the destination IP is used for indicating IP addresses requested to be accessed by a plurality of servers of the host; the destination domain name is used for indicating websites requested to be accessed by a plurality of servers of the host; the server log is generated through a log generation system deployed in the host; determining malicious destination address information in the multiple pieces of destination address information; the malicious destination address information refers to destination address information successfully matched with a malicious address in the threat intelligence system; determining an alarm object according to the malicious destination address information; and outputting the malicious external connection event alarm information to the alarm object. According to the invention, the detection coverage can be improved, and the detection cost can be saved.

The present application relates to a method, apparatus, computer device, and storage medium for identifying abnormal user login behaviors. The method includes: obtaining current login information corresponding to the current login behavior of a target user; determining a login time anomaly probability, a login location anomaly probability, and a login time interval anomaly probability corresponding to the current login behavior according to the current login time point, the current login location, and the login time interval between the current login behavior and the previous login behavior; and determining a server migration anomaly probability that the current login behavior represents a transfer from a previous server to the current server according to the previous server identifier of the previous server logged in by the previous login behavior, the current server identifier, and the previous server identifier; and identifying an anomaly in the current login behavior of the target user according to the login time anomaly probability, the login location anomaly probability, the server migration anomaly probability, and the login time interval anomaly probability. By using this method, abnormal user login behaviors can be accurately identified.

According to an aspect there is provided a computer-implemented method of operating a leader server in a leader server-follower server log replication configuration. The method comprises (i) storing (801) a current master state of a system and maintaining a master log relating to the current master state, wherein the master log comprises a plurality of log entries each having a respective log index, wherein each log entry indicates a respective change to the master state of the system; (ii) performing (803) a log compaction procedure to remove from the master log any log entry for which the respective change to the master state of the system has been overridden by a change to the master state in a subsequent log entry; (iii) storing (805) a compaction index that is the highest log index of the log entries removed in the log compaction procedure; (iv) storing (807) an override index that is the highest log index of the log entries for which the respective change to the master state overrode a change to the master state by an earlier log entry; and (v) sending (809) the compaction index and the override index to one or more follower servers that are to store a replica of the master log relating to the current master state.

The application relates to the technical field of electrical equipment testing, in particular to an IDC equipment intelligent detection and classification management method and system, which comprises the following steps: collecting the current, voltage, power consumption and temperature of a server in an IDC cabinet, synchronously recording the CPU occupancy rate, GPU occupancy rate, storage I / O load and network throughput rate, extracting server log entries and storing the server log entries into an equipment exception log library, and obtaining IDC equipment running state data.In the application, the current, voltage, power consumption and temperature of the IDC equipment are synchronously monitored, and server running data is collected, a new scheme optimizes the comprehensiveness of data and the real-time performance of monitoring, the monitoring strategy provides more fine risk assessment and classification management by dynamically analyzing the state fluctuation of the equipment, the accuracy of fault prediction and the efficiency of maintenance are improved, the prediction capability for potential problems is enhanced by comprehensively utilizing the analysis of abnormal logs and running data, and the system downtime rate and maintenance cost are effectively reduced.

The application provides a multi-server log collection method, device and system, applied to the technical field of computers, to solve the problems of complex wiring and high cost in log collection in related technologies, and proposes the scheme, a first wireless transceiver module is arranged on each server, a second wireless transceiver module is arranged in the data transmission device of each cabinet, and the data transmission device is connected with a log management equipment, the method is applied to the data transmission device, and the method comprises the following steps: receiving the baseboard management controller system log sent by the first wireless transceiver module on each server in the current cabinet through the second wireless transceiver module of the current cabinet; determining a target data transmission device according to a current load condition; and sending the baseboard management controller system log to the log management equipment through the target data transmission device. The application can greatly reduce the number of wirings, thereby reducing the wiring complexity, reducing the wiring cost, and being easy to maintain.

The application discloses a method and system for port scanning detection by using server logs, comprising a feature extraction step and a port scanning detection step; first, access logs on a server cluster are collected, then feature extraction is carried out to construct aggregated records describing access IP behaviors, and finally, whether port scanning occurs is judged by using rules or a clustering method according to the number of positive samples, and meanwhile, the detection result is fed back to an administrator and a positive sample database, so that the accuracy of the method is further improved. The application fully considers the actual needs of operation and maintenance safety audit managers, and has strong implementability and applicability.

The invention discloses a server log reporting control method and device, a storage medium and electronic equipment, and the server log reporting control method comprises the steps that a target memory is deployed in a server, and an operating system and a basic input and output system are operated in the server; a basic input / output system is used for executing files in a target memory, and the method is applied to an operating system and comprises the following steps: under the condition that a server runs a server service, respectively adding a plurality of sections of control codes into system source codes of the basic input / output system to obtain a plurality of reference system codes; compiling a plurality of reference system codes to obtain reference control files of a plurality of target file types; screening out a target control file matched with the current resource load state of the server from the plurality of reference control files; and writing the target control file into the target memory, thereby solving the problem that the control option adjustment mode of the log reporting function of the server lacks flexibility and the like in related technologies.

The application discloses a kind of server security access method, device, electronic equipment and readable storage medium, applied to server, server is connected with one or more client communication, method includes: according to server log file, the access log of each user corresponding to each client is determined;Each access log is analyzed using risk assessment rule, and the target risk category that corresponding user hits in risk assessment rule is determined;Risk assessment rule includes the combination of one or more of API connection failure assessment rule, server resource access frequency assessment rule, off-site login assessment rule, high concurrent access assessment rule;According to the corresponding relationship between risk category and restriction rule, the target restriction rule corresponding to target risk category is determined;The user that hits corresponding target risk category is limited using target restriction rule.This scheme can be more accurate user risk assessment to client user and realize more flexible risk user control.

This application relates to a bidirectional virtual account hosting method, apparatus, computer device, storage medium, and computer program product. The method includes: launching a virtual Windows system created in a first application container engine and a virtual Android system created in a second application container engine; obtaining the number of friends of each account currently hosting and logging into the enterprise instant messaging application based on a first version of the enterprise instant messaging application in the virtual Windows system and a second version of the enterprise instant messaging application in the virtual Android system; wherein the number of friends of each account is positively correlated with the server memory occupied by the first version of the enterprise instant messaging application; and dynamically adjusting the hosting status of each account logging into the first version of the enterprise instant messaging application based on the number of friends of each account and the number of servers logged into by each account to free up server memory. This method can improve system operational stability.

Embodiments of the present application provide a method and apparatus for generating a server log, a non-transitory readable storage medium and an electronic device. The method includes: in response to starting to update target firmware in a server from a first version to a second version by a target program in an operating system of the server, acquiring first version information of the target firmware, and sending update start information to a baseboard management controller (BMC) of the server; in response to the target firmware being completely updated from the first version to the second version by the target program, acquiring second version information of the target firmware, and sending update end information to the BMC. Through the present application, it solves the problem of BMC being unable to record version information of firmware in the log when updating the firmware in the server by the target program in the operating system of the server.

The present invention belongs to the technical field of server log storage, and specifically provides a system and method for a server to receive and store BIOS serial port logs. The system includes a BIOS and a BMC; the BMC is connected to the BIOS, and the BMC is used to check the BIOS serial port status and set the BIOS serial port parameters; the BMC is connected to a host through a control module, and the BMC operates on the host through the control module; the BMC is connected to a log collection module, and the BMC is used to set the serial port parameters of the log collection module and set the storage permissions of the log collection module; the BIOS is connected to the log collection module through the host, the BIOS opens and closes the serial port on the host, and sends serial port information to the log collection module; the log collection module receives and stores the BIOS serial port logs according to the serial port information sent by the BIOS and the permission information set by the BMC. It does not occupy the BMC serial port channel. It saves time and labor costs.

The invention relates to the technical field of Internet, and provides an anti-quantum two-factor identity authentication method and system for multiple servers. According to the method, in a registration stage, biological characteristics of a user and physical characteristics of a client PUF (Physical Unclonable Function) are combined to serve as a two-factor authentication factor, a temporary identity label and temporary password information are generated in combination with an identity label and a password of the user for registration, and a registration center returns login verification information to a client for storage; in the login verification stage, login verification of the user is completed through login verification information stored by the client; and entering a key negotiation stage after the login verification is successful, and negotiating a session key between the client and the server logged in by the user by using a central binomial distribution sampling technology and combining an error coordination mechanism in the stage. According to the method provided by the invention, server leakage attacks and quantum computing attacks can be resisted, so that safe and efficient identity authentication is completed.

The present invention discloses a serial port data recording and display method and related components. By detecting the data output of a serial port to be detected, recording the data in a server log when the serial port to be detected has data output, and sending the serial port data to an external terminal corresponding to the serial port to be detected when the SOL function corresponding to the serial port to be detected with data output is turned on, the serial port data is recorded and displayed for the serial port to be detected. In addition, the serial port data recording and display method is applied to the management process in the BMC, that is, the serial port data is recorded in the server log and sent to the external terminal using the same process, avoiding the abnormal situation where data cannot be recorded due to competition when two processes are used separately, thereby improving the reliability of serial port data acquisition.

The present invention teaches a method for determining an accurate measure of unique download sessions in an environment where IP addresses are shared among multiple devices. According to a first preferred embodiment, the system of the present invention may analyze requested server log data to determine the number of unique client devices sharing the same IP addresses. The system may then dynamically adjust the length of lookback windows for each unique device based on observed download behavior and the number of user agents associated with each overlapping IP address.

An Information Handling System (IHS), such as an IHS supporting workspaces employing subject workspace data, and / or an IHS of a workspace orchestration service may identify each modification to the subject data, identify each trusted entity performing each trusted operation on the data, and identify each unauthorized or undocumented modification to the data, each based, at least in part, on each gap in identification of each trusted entity performing each trusted operation on the data. Whereupon, a security score of the data may be decremented for each identified unauthorized or undocumented modification to the data. A data passport may be implemented, in which each modification to the data is identified. This data passport may be a ledger, such as a blockchain, a log file, such as an Extract, Transform, Load (ETL) server log file, rendered content from layered applications, such as a certificate chain (e.g., a final leaf certificate node).

A voice quality information collection device includes a SIP server log collection unit for collecting a SIP server log including an incoming call number, identification information of a destination carrier, and a line number, from a SIP server, an MG log collection unit for collecting an MG log including a TerminationID allocated by a predetermined logic and a delay time calculated by an RTCP report, from an MG, and a data generation unit for converting a line number included in the SIP server log into a TerminationID and integrating the post-conversion SIP server log and the MG log by using a TerminationID, to generate log integration information.

Embodiments of the present application provide a server log generation method and apparatus, a nonvolatile readable storage medium, and an electronic device. The method comprises: when a target program in an operating system of a server starts to update target firmware in the server from a first version to a second version, acquiring first version information of the target firmware, and sending updating starting information to a baseboard management controller (BMC) of the server; and when the target program completes the updating of the target firmware from the first version to the second version, acquiring second version information of the target firmware, and sending updating ending information to the BMC. The present application solves the problem that a BMC cannot record version information of firmware in a log when a target program in an operating system of a server updates the firmware of the server.

This system provides a notification system that allows the user of a terminal device to collectively access print log information from multiple image forming machines that perform printing on print data sent from a terminal device to a print server. [Solution] In a notification system 100 according to one aspect of the present invention, the print server 2 outputs log information including the print status of print data to the log collection server 4, and the log collection server 4 stores the output log information. The notification server 5 acquires a plurality of stored log information based on predetermined conditions, converts the acquired log information into notification information, and transmits the converted notification information to the terminal device 1. The terminal device 1 notifies the notification information.

The invention discloses a server log file backup method and device, equipment, a medium and a product, and relates to the technical field of cloud computing, and the method comprises the steps: obtaining a target log file package uploaded by at least one target log server, and determining a target log type of a target log file contained in the target log file package; according to the target log type and candidate log types associated with the candidate storage containers, determining a target storage container from the candidate storage containers, and storing the target log file as a to-be-backed-up log file in the target storage container; when it is detected that the current moment meets the log file backup moment, file backup operation is executed on the to-be-backed-up log files stored in the candidate storage containers respectively. According to the method, the effects of centralized storage and backup of the to-be-backed-up log files are achieved, and compared with an existing mode of sequentially accessing each log server to conduct log file backup, the backup efficiency of the log files is improved, and the workload of log file backup is reduced.

A method and apparatus for estimating bitrate, buffering events and / or other QoE metrics of video reception, based on CDN logs, are provided. The method and apparatus may rely on an AI model, including a neural network. The neural network may receive a training data set comprised of a plurality of CDN server logs. The CDN server logs may be associated with known QoE metrics collected from a plurality of user devices. Once the neural network is trained, a CDN server log, without associated QoE metrics, may be received as input. With the trained neural network and the CDN server log, buffering events and average bitrate QoE metrics may be estimated for one or more user devices without explicitly receiving QoE metrics from the user device.