Natural Language Log Querying for Faster Cloud Security Reports

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Creating customized reports from large volumes of cloud-based system logs is difficult due to the sheer size of transaction logs, requiring users to spend significant time selecting filters and waiting for data to load, making it challenging to extract desired information efficiently.

Innovation Solution

A natural language interface is implemented to convert user queries into search parameters, allowing for the retrieval and visualization of desired log data through a machine learning system, enabling users to create customized reports using natural language inputs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If users manually select filters and wait for logs to load to sort through trillions of log data entries, then they can obtain desired information from cloud-based system logs, but the process requires a large amount of time and effort

Engineering Contradiction:

Improvedata extraction accuracyVSAvoidreport generation time

Core Design Contradiction:

Measurement precisionVSLoss of time

Solution Approach 1:

The patent introduces a natural language processing intermediary that translates user queries into automated search parameters. Instead of users manually selecting filters, the NLP system acts as a mediator between the user's natural language input and the log analysis system, automatically generating the appropriate filters and queries to extract desired information from trillions of log entries.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the manual mechanical process of filter selection with an automated computational system. The natural language processing system automatically converts user intent into structured queries and filters, eliminating the need for users to manually navigate through numerous filter options and wait for data to load.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Quantity of substance

If cloud-based systems log trillions of transactions with hundreds of millions of transactions each day, then comprehensive system monitoring is achieved, but filtering through the data to create customized reports becomes extremely difficult

Engineering Contradiction:

Improvelog data volumeVSAvoidreport creation ease

Core Design Contradiction:

Quantity of substanceVSEase of operation

Solution Approach 1:

The natural language processing system serves as an intermediary that bridges the gap between the vast volume of logged data and the user's need for customized reports. It automatically interprets user intent and translates it into precise queries that can efficiently navigate and filter through trillions of log entries without requiring manual intervention.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system dynamically changes query parameters based on natural language input. Instead of requiring users to manually adjust numerous filter parameters, the NLP system automatically modifies search parameters, time ranges, data types, and other query attributes based on the user's natural language description of their information needs.

Inventive Principle:

Principle #35Parameter changes

3Adaptability or versatility

If traditional log analysis interfaces require users to select various filters manually, then detailed control over data retrieval is achieved, but the complexity of the operation increases significantly

Engineering Contradiction:

Improvequery control flexibilityVSAvoidinterface complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent replaces the complex mechanical interface of manual filter selection with a natural language processing system. Users can express their information needs in simple natural language without navigating complex filter interfaces, while the system automatically translates these inputs into detailed, customized queries that maintain the same level of control and flexibility.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The natural language processing system provides a universal interface that can handle diverse query types without requiring users to learn different interface mechanisms. A single natural language input method can retrieve various types of log data with different filters and parameters, making the system adaptable to multiple query scenarios while maintaining operational simplicity.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS12585642B2Natural language interface for querying cloud security logs

Publication Date: 2026.03.24 ZSCALER INC

AI summary

Systems and methods for processing search queries are provided. A method, according to one implementation, includes a step of receiving a search request from an authorized user associated with an enterprise, wherein the search request includes natural language and is received via a query field of a User Interface (UI). The method also includes a step of parsing the search request to convert the natural language into one or more search parameters and a display format. Also, the method includes a step of retrieving log data from a private database associated with the enterprise, wherein the log data is retrieved in accordance with the one or more search parameters and is related to network activities associated with the enterprise. Furthermore, the method includes a step of displaying the log data on the UI in accordance with the display format.