Attribute tracking, profiling, and recognition

摘要

Techniques for tracking, profiling and recognizing attributes associated with transactions associated with computer system services. A bitmap representation of the unique identifiers created from name-value pairs of attributes is created and one or more operations are performed on the representation to process the bitmap representation. The one or more operations include operations to, for example, compress the bitmap representation, sub-sample the bitmap representation, locate patterns of attributes within the bitmap representation and other such processing operations. The processed bitmaps may then be further queried to analyze the event data.

主权项

1. A computer-implemented method for tracking a plurality of service attributes, comprising:
under the control of one or more computer systems configured with executable instructions, receiving one or more transactions by one or more clients to one or more services, the one or more transactions including at least a set of attribute data; creating, in a name-value pair repository, one or more name-value pair entries that each comprises one or more name-value identifiers and one or more name-value pairs, each of the one or more name-value pairs based at least in part on a first subset of the set of attribute data; generating a matrix representation of a plurality of events, the matrix representation comprising one or more matrix entries, each matrix entry of the one or more matrix entries corresponding to at least one of the plurality of the name-value identifiers of a corresponding event of the plurality of events; producing one or more bitmap representations based at least in part on the matrix representation; performing one or more operations to produce one or more processed bitmap representations based at least in part on one or more of the one or more bitmap representations, the one or more operations including at least one of: compressing one or more of the one or more bitmap representations, normalizing one or more of the one or more bitmap representations, periodically sampling one or more of the one or more bitmap representations, or statistically sampling one or more of the one or more bitmap representations; and analyzing the one or more processed bitmap representations.