Hewlett-Packard Development Company, L.p.

Entit Software LLC

Hewlett Packard Enterprise Development LP

Micro Focus Lcc

Wenting Tang

Ludmila Cherkasova

Yun Fu

Wei T Huang

Christian Friedrich Beedgen

Debabrata Dash

Marylou Orayani

Lance Warren Russell

Zhichen Xu

Mallik Mahalingam

Zheng Zhang

Yizheng Zhou

Masaki Utsumiya

Sharad Singhal

Wei Lun Huang

Bin Yu

Bradley W Cleveland

Christian F Beedgen

A data storage system includes a column store and a row store. The data storage system may generate a query summary. The data storage system determines query summary fields comprised of a subset of fields from a schema used to store data in the row store. The data storage system searches the column store or the row store for query results in the query summary fields. A query summary field is generated from the query results in the query summary fields.

Query summary generation using row-column data storage

Systems and methods for processing log data are provided. A set of data chunks is determined. Each data chunk is associated with a set of events, which are grouped according to a primary time dimension field of each event of the set of events. A metadata structure is determined for each of the data chunks. The metadata structure includes comprises a range of the primary time dimension field of all of the events in the data chunk and a range of a secondary time dimension field of all of the events in the data chunk. A subset of the data chunks is selected. A data chunk associated with at least one event of the plurality of events is generated according to the secondary time dimension field of the at least one event.

Clustering event data by multiple time dimensions

In some examples, a set of events is received. A row-based chunk includes the set of events and metadata about the set of events is generated, and a column-based chunk that includes metadata about the set of events and, for each event in the set of events, a value of a first field of the multiple fields. The metadata about the set of events includes at least one of a minimum value or a maximum value of the first field over the events in the set of events.

Generating row-based and column-based chunks

A logging system includes an event receiver and a storage manager. The receiver receives log data, processes it, and outputs a column-based data 'chunk.' The manager receives and stores chunks. The receiver includes buffers that store events and a metadata structure that stores metadata about the contents of the buffers. Each buffer is associated with a particular event field and includes values from that field from one or more events. The metadata includes, for each 'field of interest,' a minimum value and a maximum value that reflect the range of values of that field over all of the events in the buffers. A chunk is generated for each buffer and includes the metadata structure and a compressed version of the buffer contents. The metadata structure acts as a search index when querying event data. The logging system can be used in conjunction with a security information/event management (SIEM) system.

Storing log data efficiently while supporting querying

A logging system includes an event receiver and a storage manager. The receiver receives log data, processes it, and outputs a data 'chunk.' The manager receives data chunks and stores them so that they can be queried. The receiver includes buffers that store events and a metadata structure that stores metadata about the contents of the buffers. The metadata includes a unique identifier associated with the receiver, the number of events in the buffers, and, for each 'field of interest,' a minimum value and a maximum value that reflect the range of values of that field over all of the events in the buffers. A chunk includes the metadata structure and a compressed version of the contents of the buffers. The metadata structure acts as a search index when querying event data. The logging system can be used in conjunction with a security information/event management (SIEM) system.

Storing log data efficiently while supporting querying to assist in computer network security

A system and method are provided for relating aborted client accesses of server information to the quality of service provided to clients by a server in a client-server network. According to one embodiment, a method comprises determining performance data for at least one aborted client access of information from a server in a client-server network, and using the performance data to determine whether the aborted client access(es) relate to the quality of service provided to a client by the server.

System and method for relating aborted client accesses of data to quality of service provided by a server in a client-server network

A method comprises receiving, into a capacity planning system, workload information representing an expected workload of client accesses of streaming media files from a site. The method further comprises the capacity planning system determining, for at least one server configuration, how many servers of the at least one server configuration to be included at the site for supporting the expected workload in a desired manner.

System and method for determining how many servers of at least one server configuration to be included at a service provider's site for supporting an expected workload

According to at least one embodiment, a method comprises receiving, into a capacity planning system, workload information representing an expected workload of client accesses of streaming media files from a site. The method further comprises receiving, into the capacity planning system, at least one service parameter that defines a desired service characteristic to be provided by a media server configuration under the expected workload. The method further comprises determining, by the capacity planning system, for at least one server configuration, how many servers of the at least one server configuration to be included at the site for supporting the expected workload in compliance with the at least one service parameter.

System and method for determining a streaming media server configuration for supporting expected workload in compliance with at least one service parameter

According to at least one embodiment, a method comprises receiving a session trace log identifying a plurality of sessions accessing streaming media files from a media server. The method further comprises deriving from the session trace log a segment trace log that identifies for each of a plurality of time intervals the segments of the streaming media files accessed, and using the segment trace log to develop an analytical cache performance model. According to at least one embodiment, a method comprises receiving workload information representing client accesses of streaming media files from a media server, and using an analytical cache performance model to compute a cache hit ratio for the media server under the received workload.

Analytical cache performance model for a media server

A method and system for handing-off TCP states in a communication network. Specifically, the present invention allows for handing-off TCP states between nodes in an associated network that is optimized for rare handoff of TCP states. The handoff occurs between dynamically loadable modules that wrap around the TCP/IP stack located at a front-end node and a selected back-end web server. A handoff protocol implemented by the loadable modules works within the kernel level of the existing TCP/IP code. As such, no changes to the existing TCP/IP code is necessary. The loadable modules at the front-end are able to select a back-end web server depending on the content of the web request, coordinate handing off TCP states, and forward packets to the back-end web server. Loadable modules at the selected back-end modify response packets going out to reflect the proper TCP state of the front-end node.

Method and system for a modular transmission control protocol (TCP) rare-handoff design in a streams based transmission control protocol/internet protocol (TCP/IP) implementation

Systems and methods for managing admission of requests to a streaming media server are provided. In certain embodiments, a method comprises receiving a new request for a streaming file to be served by a media server, and determining a cost to the media server for serving the requested streaming file, wherein the cost corresponds to the media server's resources to be consumed in serving the requested streaming file. The method further comprises determining, based at least in part on the cost, whether to admit the new request for service by the media server. In certain embodiments, a method comprises receiving, at a time T, a new request for a streaming file to be served by a media server, and creating a segment-based model of the media server's memory as of time T. And, based at least in part on the segment-based model of the media server's memory, determining whether to accept the received request for service by the media server.

Cost-aware admission control for streaming media server

A method and system for handing-off TCP states in a communication network. Specifically, the present invention discloses allows for transferring TCP states between front-end node and a plurality of back-end web servers. The handoff occurs between dynamically loadable modules that wrap around the TCP/IP stack located at a front-end node and a selected back-end web server. A handoff protocol implemented by the loadable modules works within the kernel level of the existing TCP/IP code. As such, no changes to the existing TCP/IP code is necessary. The loadable modules at the front-end are able to select a back-end web server depending on the HTTP request, coordinate handing off TCP states, and forward packets to the back-end web server. Loadable modules at the selected back-end modify response packets going out to reflect the proper TCP state of the front-end node.

Method and system for a front-end modular transmission control protocol (TCP) handoff design in a streams based transmission control protocol/internet protocol (TCP/IP) implementation

A system and method for modeling accesses of a streaming file are provided. In certain embodiments, the method comprises identifying, for a time interval of interest, at least one request received at a server for accessing a streaming file, and for each of the at least one request, determining a segment of the streaming file accessed during the time interval of interest. If multiple requests are identified for the streaming file during the time interval of interest, then determining, from the determined segments of the streaming file accessed by each of the multiple requests, at least one unique segment of the streaming file that was most recently accessed within the time interval of interest.

Segment-based model of file accesses for streaming files

A method comprises receiving, into a capacity planning tool, configuration information for at least one streaming media server. The method further comprises receiving, into the capacity planning tool, workload information for a workload of client accesses of streaming media files from a server, and the capacity planning tool evaluating a capacity of the at least one streaming media server for supporting the workload.

Growing community of inventors

Sunnyvale, CA, United States of America

Wenting Tang