Abstract: Smart information retrieval is provided via artificial intelligence. Content stored in documents in a database is accessed and contextual chunks of individual ones of the documents are identified, wherein the contextual chunks include portions of content stored in the individual ones of the documents. Embeddings associated with the contextual chunks are generated and stored in a vector database. A plurality of relationships are defined among at least some of the contextual chunks and generates relational embeddings using the plurality of identified relationships. The relational embeddings are stored in a database. A query is received for information associated with at least some of the content and an embedding representing the query is generated. The embedding representing the query is transmitted to at least one large language model, and a response including at least some of the contextual chunks is received. The response is transmitted to a device associated with the query.

Abstract: A computer-implemented method for identifying a use anomaly potentially exposing sensitive data is disclosed. The method comprises receiving data comprising logs of a communication involving a computing device, where the logs comprise distinct logs of at least three communication abstraction levels. At least three anomaly classifiers are operated for logs from each of the at least three communication abstraction levels. An ensemble model is used to identify an anomaly in the communication, by processing output from each of the at least three anomaly classifiers. The various logs from a moment in time when the anomaly occurred are collated, and a graphical user interface is generated for reviewing the identified anomaly and collated logs. A human reviewer is then alerted that an anomaly has been identified.

Abstract: A computer-implemented method for identifying a use anomaly potentially exposing sensitive data is disclosed. The method comprises receiving data comprising logs of a communication involving a computing device, where the logs comprise distinct logs of at least three communication abstraction levels. At least three anomaly classifiers are operated for logs from each of the at least three communication abstraction levels. An ensemble model is used to identify an anomaly in the communication, by processing output from each of the at least three anomaly classifiers. The various logs from a moment in time when the anomaly occurred are collated, and a graphical user interface is generated for reviewing the identified anomaly and collated logs. A human reviewer is then alerted that an anomaly has been identified.

Abstract: A computer-implemented method for identifying a use anomaly potentially exposing sensitive data is disclosed. The method comprises receiving data comprising logs of a communication involving a computing device, where the logs comprise distinct logs of at least three communication abstraction levels. At least three anomaly classifiers are operated for logs from each of the at least three communication abstraction levels. An ensemble model is used to identify an anomaly in the communication, by processing output from each of the at least three anomaly classifiers. The various logs from a moment in time when the anomaly occurred are collated, and a graphical user interface is generated for reviewing the identified anomaly and collated logs. A human reviewer is then alerted that an anomaly has been identified.

Abstract: Systems and methods for predicting and preventing system incidents such as outages or failures based on advanced log analytics are described. A processing center comprising an incident prediction server and log database may receive application server logs generated by an application server and historical incident data generated by an incident database server. The processing center may be configured to cluster a subset of application server logs and based on the subset of application server logs and the incident data, determine in real time or near real time the likelihood of occurrence of an incident such as a system outage or failure.

Abstract: Systems and methods for predicting and preventing system incidents such as outages or failures based on advanced log analytics are described. A processing center comprising an incident prediction server and log database may receive application server logs generated by an application server and historical incident data generated by an incident database server. The processing center may be configured to cluster a subset of application server logs and based on the subset of application server logs and the incident data, determine in real time or near real time the likelihood of occurrence of an incident such as a system outage or failure.