Abstract: Computer implemented systems and methods are disclosed for annotating and linking electronic documents. In accordance with some embodiments, annotations assigned to source electronic documents are received and snippets are generated from the received annotations. The generated snippets are aggregated into clusters, which are used to generate an electronic document. Links between the snippets and their respective source documents may be generated and embedded in the generated electronic document.

Abstract: A fair scheduling system with methodology for scheduling queries for execution by a database management system in a fair manner. The system obtains query jobs for execution by the database management system and cost estimates to execute the query jobs. Based on the cost estimates, the system causes the database management system to execute the query jobs as separate sub-query tasks in a round-robin fashion. By doing so, the execution latency of low cost query jobs that return few results is reduced when the query jobs are concurrently executed with high cost query jobs that return many results.

Abstract: Systems and methods are disclosed for collocation detection. In accordance with one implementation, a method is provided for collocation detection. The method includes obtaining a first object observation that includes a first object identifier, a first observation time, and a first observation location. The method also includes obtaining a second object observation that includes a second object identifier, a second observation time, and a second observation location. In addition, the method includes associating the first observation with a first area on a map, associating the second observation with a second area on the map, and determining whether a potential meeting occurred between objects associated with the first object identifier and the second object identifier based on the first and second observation times, and the first and second areas.

Abstract: Systems, methods, and non-transitory computer readable media are provided for facilitating improved analysis of remedial actions for faults. Fault information may be obtained. The fault information may characterize a fault of a device. The fault may be clustered into a fault type based on the fault information. A set of remedial actions taken for the fault type may be identified. A set of remedial effects of the set of remedial actions for the fault type may be determined. A timeline view of the fault type may be generated based on the set of remedial actions and the set of remedial effects. The timeline view may include a visual representation of effectiveness of the set of remedial actions. An interface, through which the timeline view of the fault type is accessible, may be provided.

Abstract: A method and system for drawing a stack graph that includes a timeline and one or more stack lines based on a set of event data. A stack line may be associated with an event target and may include one or more event overlays that represent event objects. In one implementation, event overlays may include a visual characteristic that identifies an event source associated with the event object of the event overlay.

Abstract: Computer-implemented systems and methods are disclosed for providing a graphical user interface for tagging external content. In accordance with some embodiments, a method is provided for tagging content external to a database system. The method comprises accessing the external content of an electronic device. The method may comprise enhancing the web browser by providing a tagging interface for tagging at least a portion of the external content. The method may further comprise receiving created tag associated with a tagged portion of the external document content, and exporting the external content and the received tag to the database system. The tagging interface can also provide an option to export the created tag to an internal database system.

Abstract: A computer-implemented system or process is programmed or configured to use a configuration file to specify one or more tasks to apply to raw ingested data. A task may be a sequence of instructions programmed or configured to format raw ingested data into a dataset in a CSV format. Examples of tasks may include: a parser to parse Cobol data into a CSV, a parser to parse XML into a CSV, a parser to parse text using fixed-width fields to a CSV, a parser to parse files in a zip archive into a CSV, a regular expression search/replace function, or formatting logic to remove lines or blank lines from raw ingested data. In one embodiment, the configuration file may specify a schema definition for a task to use for generating a dataset. In one embodiment, the configuration file may also include one or more access control list (ACL) definitions for the generated dataset. In one embodiment, the building of datasets using the configuration file is automated, for example, on a nightly basis.

Abstract: Systems and methods are provided for executing a program that produces one or more data streams. A visual graph can be generated based at least in part on the data streams. A given data stream can be represented in the visual graph as a dot and a connection between a pair of data streams can be represented in the visual graph as an arc connecting a pair of dots representing the pair of data streams. The visual graph can be provided for presentation through an interface. The visual graph can provide a visual representation of an execution state of the program during execution.

Abstract: Systems and methods provide real-time processing in edge servers of a network. In one example, an edge server receives real-time streaming data from at least a first client device and processes, in real-time, the received real-time streaming data to produce real-time edge processed data. The edge server receives a request for real-time streaming data from at least a second client device and provides in real-time, the real-time edge processed data to the requesting second client device. In some embodiments the edge server forwards the received real-time streaming data, and if desired, the edge processed data to a central server or other server, for processing.

Abstract: Systems and methods are provided for presenting multiple dimensions of an entity for visual comparison. Multiple sets of data representing multiple dimensions of a first entity may be accessed. The multiple sets of data may be converted for plotting within a first multidimensional arc chart. The first multidimensional arc chart may be defined by a rounded outer shape. The rounded outer shape may be characterized by an arc length. The first multidimensional arc chart may be divided into multiple sections. Individual sections may include a plot of a dimension of the first entity. Values of the plot may be determined based on corresponding positions along the arc length. An interface that includes the first multidimensional arc chart may be provided.

Abstract: Systems and methods are presented for generating a threat score and a usage score of each of a plurality of IP addresses. The threat score may be determined based on quantity of occurrences and recency of each occurrence of an IP address in network alert datasets, in addition to a weighting factor for each data source indicating the accuracy of the data source.

Abstract: A system with methodology for dynamic modular ontology. In one embodiment, for example, a method comprises: receiving a command from an analyst to create a new ontology module; receiving, from the analyst, a selection of a first ontology module to import into the new ontology module; receiving, from the analyst, a selection of a second ontology module to import into the new ontology module; detecting an ambiguous data type definition conflict between a first definition of a data type in the first ontology module and a second definition of the data type in the second ontology module; generating a third definition of the data type reflecting a resolution of the ambiguous data type definition conflict; and storing, in a data container, the new ontology module comprising the third definition of the data type.

Abstract: Systems and methods for simplified frontend processing and visualization of large datasets are provided. In example embodiments, a plurality of data objects are accessed. One or more of data objects from among the plurality of data objects are grouped into a first group. A group identifier that identifies data objects included in the first group is created. A visualization comprising a first node that represents the first group is generated. The first node is linked to the group identifier. The visualization is presented on a user interface of the user device. User input indication a user-specified action and the group identifier is received. The user-specified action is performed with the data objects identified by the group identifier.

Abstract: Embodiments of the present disclosure relate to a data analysis system that may automatically generate memory-efficient clustered data structures, automatically analyze those clustered data structures, and provide results of the automated analysis in an optimized way to an analyst. The automated analysis of the clustered data structures (also referred to herein as data clusters) may include an automated application of various criteria or rules so as to generate a compact, human-readable analysis of the data clusters. The human-readable analyses (also referred to herein as “summaries” or “conclusions”) of the data clusters may be organized into an interactive user interface so as to enable an analyst to quickly navigate among information associated with various data clusters and efficiently evaluate those data clusters in the context of, for example, a fraud investigation. Embodiments of the present disclosure also relate to automated scoring of the clustered data structures.

Abstract: Systems, methods, and non-transitory computer readable media are provided for presenting a user interface for fault analysis. Fault information may be accessed. The fault information may identify faults for one or more machines. A fault analysis interface may be provided. The fault analysis interface may include an organization view, an instance view, a subsystem view, or a map view. The fault analysis interface may enable presentation of the organization view, the instance view, the subsystem view, and the map view. The fault analysis interface may display correlations of the faults using visuals and spatial locations of the visuals.

Abstract: Systems and techniques for accelerating relationship visualizations from data objects are described herein. The configuration and/or display of a relationship matrix may be automatically determined from the data objects. The relationship matrix may display relationships through gradient, hue, color, and/or saturation. The relationship matrix may be navigable and/or interactive to accelerate relationship visualizations.

Abstract: A data pipeline including a plurality of graph pipeline paths is obtained. Each of the graph pipeline paths may include pipeline nodes, at least one of the pipeline node may have at least two inputs. Each of the inputs may comprise outputs of two or more other pipeline nodes. A linear pipeline path interface is provided for creating and presenting a linear pipeline path of the data pipeline. The linear pipeline path may include pipeline nodes, each being limited to a single input and a single output. The linear pipeline path interface may be limited to interacting with linear pipeline paths. A graph pipeline interface is provided for presenting and modifying the data pipeline. The linear pipeline path interface may be switched to the graph pipeline interface in response to a first user input.

Abstract: A resource dependency system dynamically determines and generates for display a minimized and collapsed resource dependency toolbar using two or more indicators to display a summarized view of dependency relationships to one or more selected items. For example, the system can analyze a resource dependency graph and determine root items, or items that do not depend on other items but are depended on by a selected item. The system can also determine leaf items, which no other items depend on. The system can also determine intermediary items that depend on root items and/or leaf items. Then, based on preconfigured instructions, the system can group the root, leaf, and intermediary items into two or more indicators and display the indicators on a graphical user interface conveying information about the selected item and how it is related to other items.

Abstract: Activities related to data analyses are managed in part using task objects representing tasks that need to be performed. In one embodiment, a method comprises: receiving a first request to generate a task object that describes a task; responsive to the first request, generating the task object, the task object being a data structure that comprises values for task object fields that represent attributes of the task; identifying, in a repository of data objects, a particular data object to associate with the task object; determining that a first field of the task object fields corresponds to a second field of the particular data object, the second field of the particular data object having a particular value; and assigning the first field of the task object to the particular value of the corresponding second field. In another embodiment, task objects are associated with geolocation data, and mapped or otherwise presented accordingly.