| 发明名称 |
METHOD, APPARATUS AND COMPUTER PROGRAM FOR ANALYSING EVENTS IN A COMPUTER SYSTEM |
| 摘要 |
A method, an apparatus and computer program for analysing events in a computer system, the method comprises receiving an event, splitting the event into a meta part and a content part. The method further comprises comparing the meta part by matching the meta part with meta parts from previous events. The method further comprises determining that the meta part is new, and when the meta part is determined new storing the meta part and the content part. The method further comprises wherein when the meta part is determined not new, comparing the content part by matching with previous content parts with the same meta part. The method further comprises determining that the content part is new, and when the content part is determined new, storing the content part, thereby enabling analysing events in a computer system and presenting events as new. |
| 申请公布号 |
US2015095921(A1) |
申请公布日期 |
2015.04.02 |
| 申请号 |
US201414541402 |
申请日期 |
2014.11.14 |
| 申请人 |
Unomaly AB |
发明人 |
WEIDERMAN SANDAHL Göran;GUSTAFSSON Johan |
| 分类号 |
G06F9/54;G06F17/30 |
主分类号 |
G06F9/54 |
| 代理机构 |
|
代理人 |
|
| 主权项 |
1. A method for analysing events in a computer system, the
method comprising: receiving an event; splitting the event into a meta part and a content part; comparing the meta part by matching the meta part with meta parts from previous events for determining that the meta part is new, and wherein when the meta part is determined new; storing the meta part and the content part; wherein
when the meta part is determined not new, comparing the content part by matching with previous content parts with the same meta part for determining that the content part is new, and when the content part is determined new, storing the content part, thereby enabling analysing events in a computer system and presenting events as new. |
| 地址 |
Stockholm SE |
