Abstract: A method and apparatus for managing configurations of computer resources in a datacenter is described. In one embodiment, a method comprises analyzing multiple configurations using rule information to produce an analysis result where each configuration in the multiple configurations defines a configuration of a resource that is managed by the data center, training a Bayesian classifier using the analysis result, and classifiying a second configuration using the trained Bayesian classifier.

Abstract: Techniques for processing electronic documents are disclosed. In one particular embodiment, the techniques may be realized as a method for processing electronic documents comprising obtaining an electronic document being sent over a network toward a destination, analyzing text content of the electronic documents to identify whether the electronic document matches any of a plurality of predefined document templates, wherein the electronic document conforms to a structure of at least one of the plurality of predefined document templates, and wherein the analyzing comprises executing at least one machine learning algorithm, the at least one machine learning algorithm trained using at least one sample electronic document having a predefined template, obtaining a document loss prevention (DLP) policy based on the at least one document template associated with the electronic document, and selectively allowing the electronic document to continue toward the destination based on the DLP policy.

Abstract: A computing device receives a file. The computing device determines whether the file has previously been scanned for violations of a data loss prevention policy. If the file was previously scanned, a result of the previous scan is used to decide whether or not the file violates the data loss prevention policy. If the file was not previously scanned, the file is scanned to decide whether or not the file violates the data loss prevention policy.

Abstract: Method and apparatus for template-based processing of electronic documents is described. In some examples, text content of the electronic documents is analyzed to identify whether each of the electronic documents matches any of a plurality of document templates. A template index is generated that relates at least one of the electronic documents with at least one of the plurality of document templates associated therewith. A search query is generated using at least one of the plurality of document templates as a respective at least one search parameter. An archive having the electronic documents is searched using the template index to locate any of the electronic documents that match the at least one document template of the search query.

Abstract: A method and apparatus for providing information to mitigate a current failure in a datacenter is described. The method comprises processing historical data regarding at least one failure. The historical data includes at least one action related to the at least one failure. The method further includes determining information for mitigating the current failure based on the historical data.

Abstract: A method and apparatus for managing configurations of computer resources in a datacenter is described. In one embodiment, a method comprises analyzing multiple configurations using rule information to produce an analysis result where each configuration in the multiple configurations defines a configuration of a resource that is managed by the data center, training a Bayesian classifier using the analysis result, and classifying a second configuration using the trained Bayesian classifier.

Abstract: A method and apparatus for generating computer configuration rules comprising receiving configuration data regarding a plurality of computers, analyzing the configuration data to determine associations within the configuration data, and generating configuration rules from a result of the analysis.

Abstract: Method and apparatus for detecting web-based electronic mail in network traffic is described. In some examples, web pages are extracted from the network traffic. Fields in each page of a group of the web pages that share a documents structure are identified. A statistical analysis of the fields of each page in the group of web pages is performed to identify any electronic mail (e-mail) fields. The group of web pages is indicated to include web-based e-mail messages if the fields of each page in the group of web pages include at least one e-mail field.

Abstract: A plurality of data objects may be replicated across a plurality of computing nodes coupled to a network. The network may include a first node operable to initiate an update operation to update a plurality of replicas of a first object. If one or more of the replicas are not reachable then the update operation may update a subset (e.g., a quorum) but not all of the replicas. For each node on which one of the replicas was updated in the update operation, the node may add the object to a list of incoherent objects. The list of incoherent objects may subsequently be used to bring the lagging replicas in sync with the replicas that were updated. In another embodiment, a plurality of replicas of an object may be stored on a plurality of nodes, similarly as described above. A first node that stores a replica of the object may store a first timestamp associated with the replica on the first node.

Abstract: A system and method for adaptively responding to update messages for a replica of a data object. A node may maintain first information regarding a replica of a data object. In various embodiments, the first information may comprise any kind of information regarding the replica of the data object. In one embodiment, the first information may comprise information indicative of accesses to the replica of the data object, e.g., may comprise access history information. In response to receiving a message for updating the replica of the data object, the node may respond to the message based on the first information. For example, the node may select one or more operations to perform based on the first information and may perform the one or more selected operations.

Abstract: A system including a plurality of nodes operable to exchange information using location-independent addresses. According to one embodiment of a method for obtaining information in a network of nodes, one or more nodes may each create an instance of a location-independent address A. The location-independent address A may represent an address for sending request messages (also referred to simply as requests) in order to obtain information or data from the one or more nodes with which the location-independent address A is associated (i.e., from the one or more nodes that create instances of the location-independent address A). According to one embodiment of a method for storing information in a network of nodes, one or more nodes may each create an instance of a location-independent address A, similarly as described above.

Abstract: A system for fault tolerant multi-stage data replication with relaxed coherency comprises one or more processors and memory coupled to the processors, where the memory stores program instructions executable by the processors to implement a data replication service. In response to an update request directed at a data object, in a first stage of replication, the data replication service is configured to update respective primary replicas at a plurality of primary replica sites for the data object, and to store metadata descriptors at each of the plurality of primary replica sites. The data replication service is configured to determine whether a notification of the update is to be sent to any other replica sites. In response to identifying such other replica sites, an update notification including contents of a metadata descriptor may be sent to the other replica sites in one or more additional replication stages.

Abstract: A plurality of data objects may be replicated across a plurality of computing nodes coupled to a network. The network may include a first node operable to initiate an update operation to update a plurality of replicas of a first object. If one or more of the replicas are not reachable then the update operation may update a subset (e.g., a quorum) but not all of the replicas. For each node on which one of the replicas was updated in the update operation, the node may add the object to a list of incoherent objects. The list of incoherent objects may subsequently be used to bring the lagging replicas in sync with the replicas that were updated. In another embodiment, a plurality of replicas of an object may be stored on a plurality of nodes, similarly as described above. A first node that stores a replica of the object may store a first timestamp associated with the replica on the first node.

Abstract: An efficient distributed transaction protocol for a distributed file sharing system is described. One embodiment of the protocol involves a transaction coordinator node sending three messages to participant nodes, where the participant nodes reply to only two of those messages. In one embodiment, the transaction coordinator node may return success to the client application after receiving replies to the second message from the participant nodes. The protocol may provide benefits associated with traditional three-phase commit (3PC) protocols while also decreasing response time latencies experienced by client applications and decreasing network traffic.

Abstract: A method and apparatus for generating computer configuration rules comprising receiving configuration data regarding a plurality of computers, analyzing the configuration data to determine associations within the configuration data, and generating configuration rules from a result of the analysis.

Abstract: A method and apparatus for parallel execution of trigger actions. One or more embodiments of the invention comprise providing a C++ class (hereinafter referred to as “dispatcher”) that can take an SQL query or trigger action and start parallel execution of the trigger action. The trigger action is optimized and parallelized. The dispatcher executes the trigger action, sets up the communication links between the various operators in the trigger action, and ensures that all the results are sent back to the trigger.

Abstract: A unified database/text retrieval system converts exact database type queries into text inclusion type queries suitable for text retrieval systems through the use of pseudo keywords. Boolean combination of the text inclusion type query elements may be readily manipulated for optimization and applied to a unified index for rapid search results. Absolute relevance values and relevance multiplier values may be added to the query elements to provide a relevance-based sorting not only of text but also of exact match type search results. Relevance values may be deduced automatically from a variety of sources.

Abstract: A method, apparatus, article of manufacture, and a memory structure for providing access to abstract data types using an index providing a tuple. The method comprises the steps of accepting a database query; generating an index predicate from the database query; and determining a tuple from an index using the index predicate. The tuple is associated with an abstract or complex data type responsive to the database query. A data stream is initialized with the index predicate; and the tuple is returned in the data stream. The apparatus comprises means for performing the above method steps, and the article of manufacture comprises a medium tangibly embodying computer instructions for performing these method steps.

Abstract: A method, apparatus, and an article of manufacture for parallel execution of SQL operations from within user defined functions. One or more embodiments of the invention provide the user defined function (UDF) with a C++ class (hereinafter referred to as “dispatcher”) that can take an SQL query and start parallel execution of the query. The query is optimized and parallelized. The dispatcher executes the query, sets up the communication links between the various operators in the query, and ensures that all the results are sent back to the data-server that originated the query request. Further, the dispatcher merges the results of the parallel execution and produces a single stream of tuples that is fed to the calling UDF. To provide the single stream to the calling UDF, one or more embodiments of the invention utilize a class that provides the UDF with a simple and easy-to-use interface to access the results of the nested SQL execution.

Abstract: A reverse index useful for identifying documents in information retrieval searches may be used concurrently for indexing while it is updated with new documents. Interruption to the use of the index is kept to a manageable level by partitioning the index and updating only single partitions of the index at a given time and further by bifurcating the index into a high speed supplemental portion that may be corrected concurrently on a real-time basis and which is periodically merged with the larger main portion. These two structures are merged during reading after brief locking, with pointer redirection.