Abstract: A data output method includes: generating, by a computer, (n?1) first conditions (n is an integer number of three or more) on a relationship between two data by dividing, in a sequential order, a common element condition in which an attribute of each of n data includes a common element, the attribute of each of the two data including the common element; extracting first data corresponding to each of n data to set the first data as a node under a condition; creating a first graph in which nodes are coupled with links based on the first condition; creating a second graph by repeatedly performing a first process, a second process and a third process; determining candidates of a combination of data from the second graph; and outputting a combination of data satisfying the common element condition from the candidates of a combination of data.

Abstract: A data output method, includes: extracting, by a computer, data satisfying a first condition on one data among a plurality of conditions, from a plurality of data, as a node; creating a first graph by coupling two nodes satisfying a second condition on a relationship between two data among the plurality of conditions with a link; creating a second graph by deleting a node that does not satisfy the second condition from the first graph; determining candidates of data combination in the second graph; and outputting a data combination satisfying the plurality of conditions from the candidates of data combination.

Abstract: A matching apparatus sets windows within match data, the windows each having a width larger than that in a window width condition defined in a query, and further sets windows each satisfying an event condition of a window defined in the query as temporary windows. Further, the matching apparatus checks sets of temporary windows against an interval condition and outputs events included in one or more sets of temporary windows each satisfying the interval condition, as a matching result.

Abstract: An information processing device includes a memory; and a processor that executes a program stored in the memory, wherein the processor executes an operation including: receiving first stream data and second stream data that each include a piece of reception data representing a set of a key and a numerical value, when detecting, from the second stream data, a piece of reception data with the same key as a key of a piece of reception data of the first stream data, obtaining a processing result by adding together numerical values of the pieces of reception data that have the same key, and storing the processing result in the memory.

Abstract: An observation information processing apparatus calculates, for each mesh, a support and a confidence. The observation information processing apparatus generates an adjacent mesh set by merging adjacent ones of the meshes. The observation information processing apparatus calculates, based on a support and a confidence of each mesh included in the adjacent mesh set, a confidence for each adjacent mesh, and sets the smallest one of the confidences calculated as a new confidence threshold value. The observation information processing apparatus detects and excludes meshes to be excluded from meshes included in the adjacent mesh set, based on the confidences and supports of the meshes included in the adjacent mesh set and the confidence threshold value.

Abstract: A computer-readable storage medium storing an update program that causes a computer to execute a process includes: acquiring an automaton performing matching of data in an input stream hierarchized by tags to a keyword in a query, the automaton in which an initial state, a start state indicating a start tag symbol, an end state indicating an end tag symbol, a transition between the initial state and the start state, a transition between the initial state and the end state, and a transition from the initial state to the initial state are defined; generating a path identifying the position of a start tag based on a hierarchy in the input stream when the start tag is read from the input stream; judging whether or not the generated path meets a condition corresponding to the keyword in the query; generating, when the generated path is judged to meet a condition.

Abstract: A retrieval device according to the present embodiment associates one tag key with one node and removes a node not having a tag key when a trie tree generating unit generates a trie tree. Moreover, because a tag key having a low priority is registered in a node close to a root node when the trie tree generating unit registers tag keys in the nodes of the trie tree, the retrieval device can narrow down a node region that is a comparison target when a trie tree searching unit performs a retrieval process.

Abstract: A data processing method includes steps of; allowing establishment of a first flag or a second flag for each of a plurality of items where corresponding values are inputted sequentially; upon detecting that a value associated with an item where the first flag is established in an Nth place is inputted and that a value associated with an item where the second flag is established in an Mth place (M is equal to or larger than N) is inputted, executing a predetermined processing to values in a range from the value that is inputted by associating with the item where the first flag is established in the Nth place to the value that is inputted by associating with the item where the second flag is established in the Mth place; and executing a processing of outputting a processed result in order from the item in the Nth place.

Abstract: When a second pattern is to be generated by adding an event to a first pattern including events, an extraction program causes a computer to execute the following process based on combinations of events. That is, the extraction program causes the computer to generate the second pattern when the number of occurrence, in the second pattern, of each of the events included in the combinations is not more than a threshold. The extraction program causes the computer to calculate, based on data including a plurality of events, a frequency at which one or more of the generated second patterns occur in the data. The extraction program causes the computer to extract the second pattern having the frequency satisfying a predetermined condition. The extraction program causes the computer to add a new event to the extracted second pattern.

Abstract: An analysis method executed by a computer, the analysis method includes: detecting a plurality of staying points where one or more mobile bodies stayed in accordance with a plurality of trace data associated with trajectories of the one or more mobile bodies; comparing, in accordance with the plurality of trace data, a first ending time of stay in a first staying point selected from among the plurality of staying points with second ending times of stay in one or more second staying points which are similar to the first staying point; and determining feature of the first staying point in accordance with a result of the comparison.

Abstract: A matching circuit includes pattern circuits, and a signal path in which the pattern circuits are series-connected, wherein each of the pattern circuits connected to a preceding-stage pattern circuit through the signal path is settable in a first operation mode and in a second operation mode, wherein each of the pattern circuits in the first operation mode generates a result of matching in response to both a result of matching supplied from a preceding-stage pattern circuit and a result obtained by matching data supplied from the preceding-stage pattern circuit against part of a regular expression pattern, and wherein each of the pattern circuits in the second operation mode generates a result of matching in response to a result obtained by matching the data supplied from the preceding-stage pattern circuit against part of a regular expression pattern, without relying on a result of matching supplied from the preceding-stage pattern circuit.

Abstract: A method for detecting an abnormal transition pattern from a transition pattern includes: first extracting an episode pattern with an appearance frequency greater than or equal to a first frequency from an episode pattern represented with a description form so as to include a first transition pattern and a second transition pattern differing in an order of a part of items from the first transition pattern to have a complementary relation thereto; second extracting a third transition pattern with an appearance frequency greater than or equal to a second frequency from the transition pattern; and specifying a transition pattern other than the third transition pattern from transition patterns included in the extracted episode pattern, and determining an abnormal transition pattern based on the transition pattern specified in the specifying when the third transition pattern includes a fourth transition pattern corresponding to the extracted episode pattern in the first extracting.

Abstract: According to one aspect, a computer-readable recording medium stores therein an extracting program 330a causing a computer to execute a process. The process includes based on event data obtained by associating a plurality of events stored in a storage unit and an occurrence time of each event, sequentially adding an event to a first pattern obtained by associating the plurality of events and the occurrence order of each event, and sequentially generating a second pattern which includes the first pattern and occurs in the event data; and extracting a pattern which satisfies a predetermined condition from the generated second pattern.

Abstract: An extraction program causes a computer to execute a process. The process includes adding an event to a first pattern including the events according to the sequential order, thus generating a second pattern in such a manner that the second pattern is generated by adding the event when a first value is less than a predetermined threshold; when the event is added, adding a predetermined value to the first value, and adding the predetermined value to a second value in a column corresponding to an end of the added event among second values corresponding to respective columns of a table; extracting the second pattern that satisfies a predetermined condition; and when an event in a second or subsequent column in the table is added.

Abstract: A data partitioning apparatus receives stream data and stores with previous-and-subsequent information that specifies data previous and subsequent to the data. Then, for groups, each of which contains the data that are stored and that are partitioned into the number of the groups, the data partitioning apparatus stores top information specifying data located at the top in a corresponding group and end information specifying data located at the end in the corresponding group. Then, when new data is stored, the data partitioning apparatus specifies data previous and subsequent to the new data and stores the new data by associating it with the previous-and-subsequent information that specifies the data previous and subsequent to the new data. Then, when data is inserted, the data partitioning apparatus updates information for each group such that the difference between the number of data belonging to each group is equal to or less than one.

Abstract: An apparatus includes a unit dividing a region into blocks having a predetermined bit length and generating addition data having the predetermined bit length corresponding to coordinate data, a unit storing storage data having the predetermined bit length, a unit generating composite data having a bit length twice the length of the predetermined bit length by connecting the addition data to the storage data, and storing the composite data, and a unit repeating an operation of designating the bit length of the composite data as the predetermined bit length, instructing to generate the addition data, and instructing to generate and store the composite data. The number of different bits between a bit string of a location corresponding to the input coordinate data and a bit string of a reference location tends to increase as a distance between the location corresponding to the coordinate data and the reference location increases.

Abstract: An apparatus extracts an area having a highest score or a lowest score that is calculated based on evaluation values of points from a target area including a set of a plurality of points that can be distributed at two-dimensional coordinates. It determines whether the area extracted and an area overlapping a plurality of the target areas intersect with each other, and deletes an area having a lower score or a higher score out of the areas determined to intersect with each other. It selects an area having a highest score or a lowest score out of the areas extracted at the extracting and not deleted at the determining. One or a plurality of areas are generated as the target areas based on an area acquired by excluding the area selected from the target area and an area acquired by excluding the area deleted at the determining.

Abstract: A matching device builds a parse tree from an event pattern. The matching device builds an automaton by, while traversing the parse tree, joining child nodes of an AND node in parallel to the AND node and joining child nodes of an OR node in parallel to the OR node. The matching device performs matching of determining whether an event stream includes the event pattern by comparing the event stream with the automaton.

Abstract: A data output method, includes: extracting, by a computer, data satisfying a first condition on one data among a plurality of conditions, from a plurality of data, as a node; creating a first graph by coupling two nodes satisfying a second condition on a relationship between two data among the plurality of conditions with a link; creating a second graph by deleting a node that does not satisfy the second condition from the first graph; determining candidates of data combination in the second graph; and outputting a data combination satisfying the plurality of conditions from the candidates of data combination.

Abstract: A collation device specifies a combination of event conditions in parallel with each other based on a query. The collation device sets the combination of event conditions in a parallel relation to the same window, connects a plurality of windows in series, and generates a similar query that sets a window interval condition between the windows in a connected relation. The collation device compares a similar query with collation data, and detects a combination of events that satisfies a condition of the similar query from among events included in the collation data.