52 results about "Server log" patented technology

The invention relates to the technical field of electrical equipment testing, in particular to an intelligent detection and classification management method and system for IDC equipment, and the method comprises the following steps: collecting the current, voltage, power consumption and temperature of a server in an IDC cabinet, synchronously recording the CPU occupancy rate and the GPU occupancy rate, storing the I / O load and the network throughput rate, extracting server log entries, and storing the server log entries in an equipment exception log library; and obtaining IDC equipment operation state data. According to the invention, by synchronously monitoring the current, voltage, power consumption and temperature of the IDC equipment and collecting the operation data of the server, the new scheme optimizes the comprehensiveness of the data and the real-time performance of the monitoring, and the monitoring strategy provides finer risk assessment and classification management by dynamically analyzing the state fluctuation of the equipment, so that the reliability of the IDC equipment is improved. Therefore, the accuracy of fault prediction and the efficiency of maintenance are improved, the analysis of abnormal logs and operation data is comprehensively utilized, the prediction capability of potential problems is enhanced, and the system downtime rate and the maintenance expenditure are effectively reduced.

The invention discloses an intelligent early warning and decision making system and method based on large model driving. The intelligent early warning and decision making system comprises a server log data layer which is responsible for collecting various log data generated in the operation process of a server; the filtering layer is used for undertaking a task of quickly screening abnormal log information; the retrieval layer is used for matching similar or relevant information in a risk library for each abnormal log; the Agent analysis and decision-making layer is used for carrying out deep analysis on abnormal conditions by utilizing natural language processing and knowledge reasoning capability of an intelligent deep large model so as to identify attack types and formulate personalized defense schemes; the defense layer is responsible for calling a built-in defense tool library to execute a defense scheme; the execution layer is used for converting an instruction of the defense layer into a specific operation automatically executed through a script; the monitoring layer is used for monitoring results in and after scheme execution in real time; the inspection layer is used for automatically inspecting the production line after monitoring is normal; and the analysis layer is used for carrying out automatic chart analysis on attack or risk data. According to the invention, automatic processing from attack detection to system recovery is realized, and the response efficiency is improved.

The invention discloses a log management method and device, and relates to the technical field of medical health and big data. A specific embodiment of the log management method comprises the following steps: in response to a received log acquisition request, acquiring pre-generated client logs and server logs in batches; matching the client logs with the server logs, splicing the successfully matched client logs and server logs into aggregation logs, and storing the aggregation logs in batches; and in response to a received state checking request, determining a client query condition and a server query condition corresponding to the state checking request, and obtaining a target log meeting the client query condition and the server query condition from the aggregated log. According to the embodiment, the client log and the server log which are successfully matched are spliced into the aggregation log, and then the target log meeting the query condition is queried in the aggregation log, so that front-end and back-end operations can be uniformly monitored, comprehensive log information can be quickly and accurately queried, and the log query efficiency is improved.

The invention discloses a server BIOS log transmission method based on function decoupling, and the method comprises the steps: a processor obtains to-be-transmitted log data and corresponding log attributes, determines the log type of the log data based on the log attributes, calls a specified real-time clock, determines the generation timestamp of the log data, and transmits the log data to a server; sending the log data to a baseboard management controller to enable the log data to carry a generation timestamp, calling a log transmission path corresponding to the log type, and sending the log data to the baseboard management controller; the baseboard management controller sorts the high-level logs and the basic logs according to the sequence of the generated timestamps from morning to evening to obtain a global log queue; mapping the log data in the global log queue into a memory through memory mapping, and backing up the log data to a flash memory; and outputting the basic logs in the global log queue to a network console according to the sequence from front to back. According to the method, the conflict between high throughput and starting timeliness in the log transmission process can be effectively solved.

The invention provides a malicious external connection event detection method and device of a host. The method comprises the steps that multiple pieces of destination address information are collected in a server log of the host; the destination address information comprises a destination IP and / or a destination domain name; the destination IP is used for indicating IP addresses requested to be accessed by a plurality of servers of the host; the destination domain name is used for indicating websites requested to be accessed by a plurality of servers of the host; the server log is generated through a log generation system deployed in the host; determining malicious destination address information in the multiple pieces of destination address information; the malicious destination address information refers to destination address information successfully matched with a malicious address in the threat intelligence system; determining an alarm object according to the malicious destination address information; and outputting the malicious external connection event alarm information to the alarm object. According to the invention, the detection coverage can be improved, and the detection cost can be saved.

The present application relates to a method, apparatus, computer device, and storage medium for identifying abnormal user login behaviors. The method includes: obtaining current login information corresponding to the current login behavior of a target user; determining a login time anomaly probability, a login location anomaly probability, and a login time interval anomaly probability corresponding to the current login behavior according to the current login time point, the current login location, and the login time interval between the current login behavior and the previous login behavior; and determining a server migration anomaly probability that the current login behavior represents a transfer from a previous server to the current server according to the previous server identifier of the previous server logged in by the previous login behavior, the current server identifier, and the previous server identifier; and identifying an anomaly in the current login behavior of the target user according to the login time anomaly probability, the login location anomaly probability, the server migration anomaly probability, and the login time interval anomaly probability. By using this method, abnormal user login behaviors can be accurately identified.

The application relates to the technical field of electrical equipment testing, in particular to an IDC equipment intelligent detection and classification management method and system, which comprises the following steps: collecting the current, voltage, power consumption and temperature of a server in an IDC cabinet, synchronously recording the CPU occupancy rate, GPU occupancy rate, storage I / O load and network throughput rate, extracting server log entries and storing the server log entries into an equipment exception log library, and obtaining IDC equipment running state data.In the application, the current, voltage, power consumption and temperature of the IDC equipment are synchronously monitored, and server running data is collected, a new scheme optimizes the comprehensiveness of data and the real-time performance of monitoring, the monitoring strategy provides more fine risk assessment and classification management by dynamically analyzing the state fluctuation of the equipment, the accuracy of fault prediction and the efficiency of maintenance are improved, the prediction capability for potential problems is enhanced by comprehensively utilizing the analysis of abnormal logs and running data, and the system downtime rate and maintenance cost are effectively reduced.

The application provides a multi-server log collection method, device and system, applied to the technical field of computers, to solve the problems of complex wiring and high cost in log collection in related technologies, and proposes the scheme, a first wireless transceiver module is arranged on each server, a second wireless transceiver module is arranged in the data transmission device of each cabinet, and the data transmission device is connected with a log management equipment, the method is applied to the data transmission device, and the method comprises the following steps: receiving the baseboard management controller system log sent by the first wireless transceiver module on each server in the current cabinet through the second wireless transceiver module of the current cabinet; determining a target data transmission device according to a current load condition; and sending the baseboard management controller system log to the log management equipment through the target data transmission device. The application can greatly reduce the number of wirings, thereby reducing the wiring complexity, reducing the wiring cost, and being easy to maintain.

The application discloses a method and system for port scanning detection by using server logs, comprising a feature extraction step and a port scanning detection step; first, access logs on a server cluster are collected, then feature extraction is carried out to construct aggregated records describing access IP behaviors, and finally, whether port scanning occurs is judged by using rules or a clustering method according to the number of positive samples, and meanwhile, the detection result is fed back to an administrator and a positive sample database, so that the accuracy of the method is further improved. The application fully considers the actual needs of operation and maintenance safety audit managers, and has strong implementability and applicability.

The application discloses a kind of server security access method, device, electronic equipment and readable storage medium, applied to server, server is connected with one or more client communication, method includes: according to server log file, the access log of each user corresponding to each client is determined;Each access log is analyzed using risk assessment rule, and the target risk category that corresponding user hits in risk assessment rule is determined;Risk assessment rule includes the combination of one or more of API connection failure assessment rule, server resource access frequency assessment rule, off-site login assessment rule, high concurrent access assessment rule;According to the corresponding relationship between risk category and restriction rule, the target restriction rule corresponding to target risk category is determined;The user that hits corresponding target risk category is limited using target restriction rule.This scheme can be more accurate user risk assessment to client user and realize more flexible risk user control.

This application relates to a bidirectional virtual account hosting method, apparatus, computer device, storage medium, and computer program product. The method includes: launching a virtual Windows system created in a first application container engine and a virtual Android system created in a second application container engine; obtaining the number of friends of each account currently hosting and logging into the enterprise instant messaging application based on a first version of the enterprise instant messaging application in the virtual Windows system and a second version of the enterprise instant messaging application in the virtual Android system; wherein the number of friends of each account is positively correlated with the server memory occupied by the first version of the enterprise instant messaging application; and dynamically adjusting the hosting status of each account logging into the first version of the enterprise instant messaging application based on the number of friends of each account and the number of servers logged into by each account to free up server memory. This method can improve system operational stability.

Embodiments of the present application provide a method and apparatus for generating a server log, a non-transitory readable storage medium and an electronic device. The method includes: in response to starting to update target firmware in a server from a first version to a second version by a target program in an operating system of the server, acquiring first version information of the target firmware, and sending update start information to a baseboard management controller (BMC) of the server; in response to the target firmware being completely updated from the first version to the second version by the target program, acquiring second version information of the target firmware, and sending update end information to the BMC. Through the present application, it solves the problem of BMC being unable to record version information of firmware in the log when updating the firmware in the server by the target program in the operating system of the server.

The present invention belongs to the technical field of server log storage, and specifically provides a system and method for a server to receive and store BIOS serial port logs. The system includes a BIOS and a BMC; the BMC is connected to the BIOS, and the BMC is used to check the BIOS serial port status and set the BIOS serial port parameters; the BMC is connected to a host through a control module, and the BMC operates on the host through the control module; the BMC is connected to a log collection module, and the BMC is used to set the serial port parameters of the log collection module and set the storage permissions of the log collection module; the BIOS is connected to the log collection module through the host, the BIOS opens and closes the serial port on the host, and sends serial port information to the log collection module; the log collection module receives and stores the BIOS serial port logs according to the serial port information sent by the BIOS and the permission information set by the BMC. It does not occupy the BMC serial port channel. It saves time and labor costs.

The invention relates to the technical field of Internet, and provides an anti-quantum two-factor identity authentication method and system for multiple servers. According to the method, in a registration stage, biological characteristics of a user and physical characteristics of a client PUF (Physical Unclonable Function) are combined to serve as a two-factor authentication factor, a temporary identity label and temporary password information are generated in combination with an identity label and a password of the user for registration, and a registration center returns login verification information to a client for storage; in the login verification stage, login verification of the user is completed through login verification information stored by the client; and entering a key negotiation stage after the login verification is successful, and negotiating a session key between the client and the server logged in by the user by using a central binomial distribution sampling technology and combining an error coordination mechanism in the stage. According to the method provided by the invention, server leakage attacks and quantum computing attacks can be resisted, so that safe and efficient identity authentication is completed.

The present invention discloses a serial port data recording and display method and related components. By detecting the data output of a serial port to be detected, recording the data in a server log when the serial port to be detected has data output, and sending the serial port data to an external terminal corresponding to the serial port to be detected when the SOL function corresponding to the serial port to be detected with data output is turned on, the serial port data is recorded and displayed for the serial port to be detected. In addition, the serial port data recording and display method is applied to the management process in the BMC, that is, the serial port data is recorded in the server log and sent to the external terminal using the same process, avoiding the abnormal situation where data cannot be recorded due to competition when two processes are used separately, thereby improving the reliability of serial port data acquisition.

The present invention teaches a method for determining an accurate measure of unique download sessions in an environment where IP addresses are shared among multiple devices. According to a first preferred embodiment, the system of the present invention may analyze requested server log data to determine the number of unique client devices sharing the same IP addresses. The system may then dynamically adjust the length of lookback windows for each unique device based on observed download behavior and the number of user agents associated with each overlapping IP address.

An Information Handling System (IHS), such as an IHS supporting workspaces employing subject workspace data, and / or an IHS of a workspace orchestration service may identify each modification to the subject data, identify each trusted entity performing each trusted operation on the data, and identify each unauthorized or undocumented modification to the data, each based, at least in part, on each gap in identification of each trusted entity performing each trusted operation on the data. Whereupon, a security score of the data may be decremented for each identified unauthorized or undocumented modification to the data. A data passport may be implemented, in which each modification to the data is identified. This data passport may be a ledger, such as a blockchain, a log file, such as an Extract, Transform, Load (ETL) server log file, rendered content from layered applications, such as a certificate chain (e.g., a final leaf certificate node).

Embodiments of the present application provide a server log generation method and apparatus, a nonvolatile readable storage medium, and an electronic device. The method comprises: when a target program in an operating system of a server starts to update target firmware in the server from a first version to a second version, acquiring first version information of the target firmware, and sending updating starting information to a baseboard management controller (BMC) of the server; and when the target program completes the updating of the target firmware from the first version to the second version, acquiring second version information of the target firmware, and sending updating ending information to the BMC. The present application solves the problem that a BMC cannot record version information of firmware in a log when a target program in an operating system of a server updates the firmware of the server.

This system provides a notification system that allows the user of a terminal device to collectively access print log information from multiple image forming machines that perform printing on print data sent from a terminal device to a print server. [Solution] In a notification system 100 according to one aspect of the present invention, the print server 2 outputs log information including the print status of print data to the log collection server 4, and the log collection server 4 stores the output log information. The notification server 5 acquires a plurality of stored log information based on predetermined conditions, converts the acquired log information into notification information, and transmits the converted notification information to the terminal device 1. The terminal device 1 notifies the notification information.

The invention discloses a server log file backup method and device, equipment, a medium and a product, and relates to the technical field of cloud computing, and the method comprises the steps: obtaining a target log file package uploaded by at least one target log server, and determining a target log type of a target log file contained in the target log file package; according to the target log type and candidate log types associated with the candidate storage containers, determining a target storage container from the candidate storage containers, and storing the target log file as a to-be-backed-up log file in the target storage container; when it is detected that the current moment meets the log file backup moment, file backup operation is executed on the to-be-backed-up log files stored in the candidate storage containers respectively. According to the method, the effects of centralized storage and backup of the to-be-backed-up log files are achieved, and compared with an existing mode of sequentially accessing each log server to conduct log file backup, the backup efficiency of the log files is improved, and the workload of log file backup is reduced.

A method and apparatus for estimating bitrate, buffering events and / or other QoE metrics of video reception, based on CDN logs, are provided. The method and apparatus may rely on an AI model, including a neural network. The neural network may receive a training data set comprised of a plurality of CDN server logs. The CDN server logs may be associated with known QoE metrics collected from a plurality of user devices. Once the neural network is trained, a CDN server log, without associated QoE metrics, may be received as input. With the trained neural network and the CDN server log, buffering events and average bitrate QoE metrics may be estimated for one or more user devices without explicitly receiving QoE metrics from the user device.

The invention discloses a BMC (Baseboard Management Controller) regular log acquisition and intelligent error analysis and positioning method, which integrates advanced technologies such as regular acquisition, content difference analysis, intelligent error identification and positioning and the like, and realizes efficient management and accurate error diagnosis of server logs. By combining the experience summary of previous project troubleshooting and positioning, the system troubleshooting efficiency is improved, the need of manual participation is reduced, the system has important practical application value, the intelligent level of server operation and maintenance and the fault response speed are improved, the operation and maintenance cost and the human resource investment are reduced, and the method is suitable for popularization and application. And powerful support is provided for efficient operation of the data center.

According to an aspect there is provided a computer-implemented method of operating a leader server in a leader server-follower server log replication configuration. The method comprises (i) storing (801) a current master state of a system and maintaining a master log relating to the current master state, wherein the master log comprises a plurality of log entries each having a respective log index, wherein each log entry indicates a respective change to the master state of the system; (ii) performing (803) a log compaction procedure to remove from the master log any log entry for which the respective change to the master state of the system has been overridden by a change to the master state in a subsequent log entry; (iii) storing (805) a compaction index that is the highest log index of the log entries removed in the log compaction procedure; (iv) storing (807) an override index that is the highest log index of the log entries for which the respective change to the master state overrode a change to the master state by an earlier log entry; and (v) sending (809) the compaction index and the override index to one or more follower servers that are to store a replica of the master log relating to the current master state.

The application relates to the field of log compression, and particularly discloses a server log data compression method, a server log data compression system, a terminal and a storage medium, which collect log files; read text content in the log files, split the text content in the log files by taking spaces as identifiers to obtain multiple segments; cyclically compare the segments, and record segments with the same content as an element; replace each element in the text content by using a marker to obtain a new log file; wherein the marker comprises a two-bit length marker and a three-bit length marker; one element corresponds to one marker; and the new log file is compressed. The application divides segments by taking spaces as identifiers to find repeated elements, performs replacement, and then performs compression, so that the number of characters in the log file is reduced, and the compression effect is improved.

The illustrative embodiments provide a consensus protocol with recovery of corrupted log entries within a log stored at a server within a cluster. Each server stores metadata comprising a last log index and a last log term of the copy of the log at the server. In response to a server having one or more corrupted log entries, the server makes a backup of the log and truncates log entries. The server then converts to a rescuee role. When an append entries call is received, the server uses the last log index and last log term from the metadata to determine whether the append entries call is received from a valid leader and can be appended to the truncated log. The server then applies one or more append entries calls to recover the corrupted log entries. Once the corrupted log entries are recovered, the server converts to the follower role.

This disclosure provides a problem diagnosis method, apparatus, system, device, medium, and product based on artificial intelligence, relating to the field of artificial intelligence technology, particularly to the fields of large models, intelligent agents, and cloud computing. The AI-based problem diagnosis method includes: generating a diagnosis request, the diagnosis request containing a target problem; employing a first intelligent agent to obtain target client logs corresponding to the target problem, obtaining target server logs corresponding to the target problem, and merging the target client logs and target server logs to obtain a target log; employing a second intelligent agent to diagnose the target problem based on the target log to obtain an initial diagnosis result and confidence level; and responding to a confidence level greater than or equal to a preset threshold, using the initial diagnosis result as the target diagnosis result for the target problem. This disclosure can improve the efficiency and accuracy of problem diagnosis.

The present application discloses a method and apparatus for predicting server log error information. The method includes loading at least one type of log information, where the log information includes log information in a error-free condition and log information in an error condition; establishing a test model based on the log information in the error-free condition and the log information in the error condition; obtaining the log information to be analyzed; and analyzing and comparing the log information to be analyzed with the test model respectively to obtain the error information corresponding to the log information to be analyzed. The present application can establish a test model based on the log information in the error-free condition and the log information in the error condition, and analyze and compare the log information to be analyzed with the established test model, so as to quickly analyze and output the error information corresponding to the log information to be analyzed, improve efficiency and increase test accuracy.

The invention discloses a network security threat detection method based on artificial intelligence, and relates to the technical field of information security, behavior events in network equipment and server logs are extracted and uniformly aligned to construct a time sequence, and then a graph structure with structure and time semantics is formed; therefore, the system has the capability of identifying the attack intention from the perspective of the global behavior chain. According to the mode, the problem that discrete and cross-time-period attack behaviors are difficult to identify in a traditional method is effectively solved, and potential attack association among a plurality of seemingly independent behaviors can be identified. Event nodes are embedded into a vector space, and context learning is carried out in combination with a memory enhanced neural network, so that the system can automatically construct an evolution relationship among events in an attack path and capture behavior logic and a propagation path of an attacker. According to the mechanism, the technical defect that the history cannot be reviewed in the attack behavior modeling of the existing method is overcome, so that the capability of reducing latent attacks and intermittent threats is improved.

This application discloses a server log reporting control method, apparatus, storage medium, and electronic device. The server log reporting control method includes: deploying a target memory in the server; running an operating system and a basic input / output system in the server; the basic input / output system executing files in the target memory; and applying the method to the operating system, including: adding multiple control code segments to the system source code of the basic input / output system while the server is running server services, obtaining multiple reference system codes; compiling the multiple reference system codes to obtain multiple reference control files of target file types; selecting a target control file from the multiple reference control files that matches the current resource load state of the server; and writing the target control file into the target memory. This solves the problem of lack of flexibility in adjusting control options for server log reporting functions in related technologies.