Abstract: The flow of events though an event-analysis system is controlled by a number of event throttles which filter events, prioritize events and control the rate at which events are provided to event-processing components of the event-analysis system. Incoming events to the event-analysis system are associated with a profile, and a metrics engine generates metrics based on the incoming events for each profile. The flow of events to the metrics engine is controlled on a per profile basis, so that excessive generation of new metrics and new profiles is limited. If the system from which the events originate is compromised, metrics associated with compromised profiles may be frozen to avoid corrupting existing metrics. Processing of events and anomalies by analysis engines within the event-analysis system may be delayed to allow the accumulation of metrics necessary for accurate analysis.

Abstract: Systems and methods are described herein for logging system events within an electronic machine using an event log structured as a collection of tree-like cause and effect graphs. An event to be logged may be received. A new event node may be created within the event log for the received event. One or more existing event nodes within the event log may be identified as having possibly caused the received event. One or more causal links may be created within the event log between the new event node and the one or more identified existing event nodes. The new event node may be stored as an unattached root node in response to not identifying an existing event node that may have caused the received event.

Abstract: Disclosed embodiments relate to identifying Electronic Control Unit (ECU) anomalies in a vehicle. Operations may include monitoring data representing real-time processing activity of the ECU; receiving comparable data relating to processing activity of at least one other ECU deemed comparable in functionality to the ECU; comparing the real-time processing activity data with the comparable data, to identify at least one anomaly in the real-time processing activity of the ECU; and implementing a control action for the ECU when the at least one anomaly is identified.

Abstract: A data storage device includes a nonvolatile memory device including a plurality of memory blocks each of which includes a plurality of regions; and a controller suitable for controlling the nonvolatile memory device, the controller comprising: a block designation unit suitable for performing a level 2 designation operation, by storing start data in a level 2 management block among the memory blocks, storing a location of the level 2 management block in a level 1 management block among the memory blocks, and storing integrity check data in the level 2 management block; and a recovery unit suitable for performing a recovery operation to the level 1 management block depending on a state of a current level 2 management block corresponding to a last location stored in the level 1 management block in the case where a sudden power-off occurs.

Abstract: Disclosed are methods and devices for supporting multiple page lengths with unique error correction coding via Galois field dimension folding. In one embodiment, a method comprises receiving a write instruction, the write instruction including user data; generating extended user data based on the user data, the extended user data including at least one symbol comprising a bit of the user data and a pre-stored bit pattern; generating parity data by encoding the extended user data; generating parity extension data by encoding the bit of the user data; writing a codeword to a page of a non-volatile memory device, the codeword including the parity extension data, the user data, and the parity data.

Abstract: Implementations of Data Bus Inversion (DBI) techniques within a memory system are disclosed. In one embodiment, a set of random access memory (RAM) integrated circuits (ICs) is separated from a logic system by a bus. The logic system can contain many of the logic functions traditionally performed on conventional RAM ICs, and accordingly the RAM ICs can be modified to not include such logic functions. The logic system, which can be a logic integrated circuit intervening between the modified RAM ICs and a traditional memory controller, additionally contains DBI encoding and decoding circuitry. In such a system, data is DBI encoded and at least one DBI bit issued when writing to the modified RAM ICs. The RAM ICs in turn store the DBI bit(s) with the encoded data. When the encoded data is read from the modified RAM ICs, it is transmitted across the bus in its encoded state along with the DBI bit(s). The logic integrated circuit then decodes the data using the DBI bit(s) to return it to its original state.

Abstract: Example peer storage systems, storage devices, and methods provide data scrub using a peer communication channel. Peer storage devices establish peer communication channels that communicate data among the peer storage devices. A storage device may identify data segments from their storage medium for a data scrub process. A peer storage device may be identified that contains corresponding data segments to the data segment being scrubbed. A corresponding lock command may be sent over the peer communication channel to lock the corresponding data segments during the data scrub process. A data scrub error report may be generated from the data scrub process. If an error is discovered during the data scrub process the storage device may use the peer communication channel to retrieve recovery data from peer storage devices to rebuild the data segment with the error.

Abstract: A memory system includes a nonvolatile memory, a memory controller included in a first package, and a memory interface circuit included in a second package that is different from the first package. The memory controller includes an encoder for performing encoding for error correction. The memory controller is configured to encode first data into second data using the encoder, and program the second data into a location in the nonvolatile memory. The memory interface circuit is interposed between the memory and the memory controller. The memory interface circuit includes a decoder for performing decoding for error correction. The memory interface circuit is configured to read third data from a first location in the nonvolatile memory, diagnose the third data by decoding the third data using the decoder, and convey a result of the diagnosis to the memory controller.

Abstract: Techniques for making storage of data objects eventually durable using redundancy encoding are described herein. Data objects are stored in a first set of data storage devices with a first durability. After a predetermined length of time, the data objects are converted to data shards and distributed to a second set of data storage devices with a second durability that is distinct from the first durability.

Abstract: Mechanisms for disassembling and reassembling a tar archive are disclosed. A computing device accesses a tar archive comprising a file payload data segment and a plurality of non-payload data segments. The non-payload data segments in the tar archive are identified. The non-payload data segments are stored in a replay log structure. The file payload data segment of a file is identified in the tar archive, and file identification data identifying the file is stored in the replay log structure. The file payload data segment is not stored in the replay log structure.

Abstract: A communication apparatus comprising: a plurality of communication processes, each performing communication process on a flow associated thereto; a plurality of network interfaces, each of the network interfaces adapted to be connected to a network; a dispatcher that receives a packet from the network interface and dispatches the packet to an associated communication process, based on a dispatch rule that defines association of a flow to a communication process to which the flow is dispatched; and a control unit that performs control to roll back each of the communication processes using saved image thereof.

Abstract: A method of performing a checkpoint on a set of connected processors and memories comprises the steps of creating one or more statefiles for one or more of the processors, querying available processing and/or memory resources, allocating data from one or more statefiles to the available resources, compressing the allocated data, storing the compressed data, and repeating the querying, allocating, compressing and storing steps until all of the statefile(s) are compressed and stored.

Abstract: A memory device includes an output pin, a mode register, a signal generator configured to generate a detection clock output signal including one of a random data pattern and a hold data pattern in response to first and second control signals from the mode register, and output the detection clock output signal through the output pin. The random data pattern includes pseudo-random data generated by the memory device. The hold data pattern is a fixed pattern pre stored in the memory device. The detection clock output signal is used for a clock and data recovery operation.

Abstract: Techniques and systems for storing and retrieving data storage devices of a data storage system are disclosed. In some embodiments, inventory holders are used to store data storage devices used by a data storage system. When data is to be transacted with the data storage devices, mobile drive units locate appropriate inventory holders and transport them to a device reading station, where an appropriate device retrieval unit transacts the data. In some embodiments, each inventory holder includes a heterogenous mix of data storage device types, the layout of which may be calculated according to the specific mix allocated to a given inventory holder. After the data has been transacted, the data storage devices are returned to the appropriate inventory holders, and the inventory holders are placed by the mobile drive units in locations where they may be accessed in response to further data transactions.

Abstract: A method includes receiving, at a processor, a timestamp as a start-point for extracting information from the storage tape. The method further includes determining, by the processor, a reel identification and a device type of a storage tape. The method further includes extracting the information, by the processor, from the storage tape starting at the start-point. The method further includes determining, by the processor, whether an end-point of the information has been reached. The method further includes reproducing, by the processor, the information to a computer-readable medium. The method further includes formatting, by the processor, the information to conform with format requirements of an activity log analyzing tool.

Abstract: One embodiment is related to a method for generating a searchable metadata table based on a backup data stream from a client to a backup system, comprising: generating a plurality of intermediate tables; and generating a searchable metadata table based on the plurality of intermediate tables, wherein the searchable metadata table may comprise, for each file or directory in a row, an inode number, a metadata hash value, an acl hash value, a name, a full path, a size, and a time of last modification.

Abstract: A computer system comprises a processor unit arranged to run a hypervisor running one or more virtual machines; a cache connected to the processor unit and comprising a plurality of cache rows, each cache row comprising a memory address, a cache line and an image modification flag; and a memory connected to the cache and arranged to store an image of at least one virtual machine. The processor unit is arranged to define a log in the memory and the cache further comprises a cache controller arranged to set the image modification flag for a cache line modified by a virtual machine being backed up, but not for a cache line modified by the hypervisor operating in privilege mode; periodically check the image modification flags; and write only the memory address of the flagged cache rows in the defined log.

Abstract: A computer-implemented method, according to one embodiment includes, for each repository data chunk in repository data that comprises a plurality of the repository data chunks, generating a corresponding set of repository distinguishing characteristics (RDCs). Each set of RDCs is generated by: applying a hash function to the respective input data chunk or repository data chunk to generate a plurality of hashes, each hash comprising a hash value and a hash position within the data chunk, applying a first function to the plurality of generated hashes to identify a first subset of hashes distributed across the data chunk, applying a second function to the hash positions of the hashes of the first subset to identify a second subset of the plurality of generated hashes, and defining the second subset of hashes as the set of RDCs.

Abstract: Embodiments for managing access to Mtrees using a mechanism through the use of net groups that contain a pool of IP addresses with configuration information that is automatically propagated to new nodes as they are added to a defined net group to facilitate zero configuration when scaling a network. Using net groups, access to an Mtree across nodes in a data center or similar network can be managed with a group of IP addresses spread across all the nodes in the cluster as a single net group entity. The net group provides flexibility to create multiple net groups that can be used to manage the appliance in management, diagnostic, data, and interconnect domains. It allows flexibility to manage the access to Mtree from different networks and security domains, and allows a user to configure the network attributes of all the IP addresses as a single entity.

Abstract: A memory-only snapshot of a file is disclosed that can be used by a system to perform a read of the file without disrupting other systems from reading or writing to the file. The in-memory snapshot structure includes a copy of allocation information of the file that points to the file data and be can be used by a backup application to read a file. A lock manager is provided that is configured to include an output parameter for file locks that includes allocation information associated with the in-memory file snapshot, thereby notifying a writer to the file that it must perform copy-on operations. A free space manager is also provided that is configured to track pinned blocks so as to both allow a write to a file to free snapshot blocks, while also preventing the freed blocks from being allocated to other files until backup read processing is completed.

Abstract: Techniques are disclosed for dynamically changing a data protection plan based on a risk score. The risk score is continuously or periodically recalculated based on situational factors that are detected from external modules. The situational factors can include natural phenomena such as weather, fire, and seismic activity. The situational factors can include manmade phenomena such as financial conditions, political stability in the region where the data resides, war, terrorist attacks, and the like. The situational factors are retrieved from one or more external modules. The external modules may be IoT (Internet of Things) modules. The external modules are monitored, and as new data from the external modules becomes available, a risk score for stored data is computed. The risk score is then used to select an appropriate data protection plan.

Abstract: Disclosed are systems and methods of synchronization between a source and a target. The synchronization relationship can be quickly and easily be created for disaster recovery, real-time backup and failover, thereby ensuring that data on the source is fully-protected at an off-site location or on another server or VM, for example, at another data center, a different building or elsewhere in the cloud. Common snapshots available on both the source and target can act as common recovery points. The common recovery points can be used to locate the most recent snapshot in common, between the source and target, to enable a delta sync of all subsequently written data at the source to the target after an offline event.

Abstract: A method for performing a recovery process of a network node of a blockchain network includes broadcasting a state request message by the network node to the other network nodes of the blockchain network to recover a target transaction of a target sequence number, receiving state reply messages that each includes a sequence number from the other network nodes, identifying the target sequence number based on the sequence numbers in the state reply messages, sending a requesting message to the other network nodes to request an ECHO message from each of the other network nodes, determining a number of valid ECHO messages that are sent by the other network nodes, recovering the target transaction based on the number of valid ECHO messages, and sending a message to the other network nodes indicating that the network node has been recovered.

Abstract: A computer-implemented method for managing a tiered storage system having an archive tier and an active storage tier comprises determining a workload for moving data between the active tier and the archive tier; and determining an assignment of data to be stored across the active tier and the archive tier, based on the determined workload.

Abstract: An apparatus in one embodiment comprises at least one processing platform including a plurality of processing devices. The processing platform is configured to receive a request to execute a serverless application, to initiate execution of the serverless application responsive to the request, to utilize one or more application function mappings to invoke one or more application functions with each such application function interacting with one or more backend services in executing the serverless application, to capture state of the serverless application for a particular point in time, and to perform operational recovery of the serverless application for the particular point in time utilizing the captured state. Capturing state of the serverless application for the particular point in time comprises capturing the state in accordance with a previously-generated serverless application manifest characterizing the application function mappings, the application functions, and the backend services.

Abstract: A computer-implemented method, according to one embodiment, includes: establishing a recovery cluster as an acting primary cluster in response to determining that a primary cluster has gone offline. In response to determining that the primary cluster is back online, the acting primary cluster is synched with the online primary cluster by: capturing a snapshot of the acting primary cluster, and pausing a normal queue of the acting primary cluster. The snapshot of the acting primary cluster is further compared with a most recent snapshot of the online primary cluster, and each difference therebetween is added to a priority queue of the acting primary cluster. Each of the differences in the priority queue are transmitted to the online primary cluster, followed by the entries in the normal queue in response to determining that each of the differences in the priority queue have been transmitted to the online primary cluster.

Abstract: According to certain aspects, a method of creating customized bootable images for client computing devices in an information management system can include: creating a backup copy of each of a plurality of client computing devices, including a first client computing device; subsequent to receiving a request to restore the first client computing device to the state at a first time, creating a customized bootable image that is configured to directly restore the first client computing device to the state at the first time, wherein the customized bootable image includes system state specific to the first client computing device at the first time and one or more drivers associated with hardware existing at time of restore on a computing device to be rebooted; and rebooting the computing device to the state of the first client computing device at the first time from the customized bootable image.

Abstract: Various systems and methods are provided for capturing and storing state information and other data being used by a web application. For example, one method involves capturing the data and state information from a web application either on demand, on schedule, or on the occurrence of an event; storing the captured information in a persistent memory; subsequent to a closing of the web application, receiving an indication that the web application has been re-opened; presenting one or more options to a user, whereby the user can select a previous version to which the web application should be restored; and using the captured information to restore the web application data and user interface to a state indicated by the selected version.

Abstract: An integrated circuit (IC) chip can include a given core at a position in the IC chip that defines a given orientation, wherein the given core is designed to perform a particular function. The IC chip can include another core designed to perform the particular function. The other core can be flipped and rotated by 180 degrees relative to the given core such that the other core is asymmetrically oriented with respect to the given core. The IC chip can also include a compare unit configured to compare outputs of the given core and the other core to detect a fault in the IC chip.

Abstract: A method and system permit a backup entity of a redundant apparatus of a communication system that shares control of hardware resources or other network resources with an active entity to indirectly determine a status of the active entity based upon behavior and reaction to actions it takes in connection with resources it shares control of with the active entity. Such a method and system permit the backup entity to deduce the state of the active entity without having any a hardware connection or other communication connection with the active entity.

Abstract: When rebuilding a RAID (Redundant Array of Independent Disks) array in which a drive has failed, if another RAID array contains a mirror copy of the of the rebuilding RAID array content, this mirroring RAID array can be used to more rapidly rebuild the RAID array with the failed drive. Data requests to the rebuilding RAID array can be redirected to the mirroring RAID array; data can be transferred from the mirroring RAID array; or a combination of these can be used to finish rebuilding more quickly. When transferring data to the rebuilding array from the mirroring array, the transfer can be performed as a direct memory access (DMA) process independently of the RAID module of either array.

Abstract: An enterprise disaster recovery system, including at least one data disk, a processor for running at least one data application that reads data from the at least one data disk and writes data to the at least one data disk over a period of time, a recovery test engine that (i) generates in parallel a plurality of processing stacks corresponding to a respective plurality of previous points in time within the period of time, each stack operative to process a command to read data at a designated address from a designated one of the at least one data disk and return data at the designated address in an image of the designated data disk at the previous point in time corresponding to the stack, and (ii) that generates in parallel a plurality of logs of commands issued by the at least one data application to write data into designated addresses of designated ones of the plurality of data disks, each log corresponding to a respective previous point in time, wherein the plurality of previous points in time within the p

Abstract: Disclosed herein are methods, systems, and processes for burn process data retrieval and notification. A burn process that is ongoing and that is initiated to generate burn data associated with a testing computing device is detected at a computing device. A determination is made that the burn data has been generated by the testing computing device as part of the burn process. The burn data associated with the burn process generated by the testing computing device is then retrieved.

Abstract: Method and system for providing message communications with failure detection and recovery are disclosed. At a respective node of a non-static collection of nodes forming a linear communication orbit: the node identifies, from among the non-static collection of nodes, a set of forward contacts distributed in a forward direction along the linear communication orbit; the node monitors a propagation state of a first query that has departed from the respective node to travel in the forward direction along the linear communication orbit; and upon detecting a propagation failure of the first query based on the monitoring, the node sends the first query directly to a first forward contact among the set of forward contacts to initiate a failure recovery process within at least part of a segment of the linear communication orbit between the respective node and the first forward contact of the respective node.

Abstract: A device, including a low-ohmic circuit path; a normal operation circuit path coupled in parallel with the low-ohmic circuit path; and a circuit element configured to select between the low-ohmic circuit path and the normal operation circuit path.

Abstract: An integrated computing system configuration system includes a computing system that executes an application to receive a customized integrated computing system configuration including a plurality of user selected design elements (DEs) associated with multiple components of a customized integrated computing system in which at least one user selected DE has one or more behaviors of the component used in a customized integrated computing system represented by the customized integrated computing system configuration.

Abstract: Method and system are provided for providing elapsed time indications for source code in a development environment. The method includes: defining blocks of source code to be timed during source code execution; monitoring defined blocks of source code during execution to determine an elapsed time for the execution of the defined block of source code; recording the elapsed time for a defined block of source code; and providing an elapsed time indication for the defined block of source code.

Abstract: Various embodiments herein each include at least one of systems, methods, and software for producing operational analytics that summarize fine-grain time scale behavior over long time durations. Some such embodiments are targeted toward understanding operationally meaningful behavior of complex dynamic systems that are often only apparent at fine-grain time scales. Such behavior occurs rarely and/or only for short durations so the analytics of some embodiments cover long time durations.

Abstract: In some examples, a server may receive, from a computing device, a device profile identifying a gaming application and metrics associated with execution of a gaming application. The server may compare the device profile with other device profiles associated with other computing devices, determine a similarity index of the device profile with the other device profiles, and select a subset of the other device profiles based at least in part on the similarity index. The server may determine configuration differences between the device profile of the computing device and individual device profiles of the subset of the other device profiles and send the configuration recommendations to the computing device. The recommendations may include at least one of (1) modifying settings of an operating system of the computing device, (2) modifying settings of the gaming application, (3) changing a hardware component or peripheral device associated with the computing device.

Abstract: According to one embodiment, a computer-implemented method includes obtaining, during a measurement period, a set of utilization metrics for a system; determining, whether the average number of outstanding system requests of the system lies between a current and an actual value of the maximum concurrency; in response to determining that the average number of outstanding system requests of the system does not lie between the current and actual values of the maximum concurrency, not adjusting the maximum concurrency value; in response to determining that the average number of outstanding system requests of the system does lie between the current and actual values of the maximum concurrency, assigning a value of the maximum concurrency to be the value of the average number of outstanding system requests; accessing a utilization function; solving the utilization function; and managing performance problems of the system indicated by solving the utilization function.

Abstract: An agent inserts one or more hooks into a sub-execution runtime environment that is configured to include a script and/or targeted to include the script. The agent including the one or more hooks monitors a behavior of the sub-execution runtime environment and/or the script. The agent subsequently obtains context information regarding the sub-execution runtime environment and/or the script so that it can control the runtime of at least the sub-execution runtime environment. Related systems, methods, and articles of manufacture are also disclosed.

Abstract: A program is executed on a processor to produce execution events. The execution events are traced using a first trace mode during a first portion of the program execution, wherein a portion of trace information for the execution events is omitted from a trace report while tracing in the first trace mode. The mode of tracing is dynamically changed to a second trace mode in response to an event trigger, such that all execution events that occur during the change of mode are captured. Execution events are traced during a second portion of the program execution using the second trace mode, wherein additional trace information for the execution events is included in the trace report while tracing in the second trace mode. The trace mode may be dynamically switched between the two trace modes during execution of the program.

Abstract: In one embodiment, a portable monitoring system can include a secondary bus and a first monitoring circuit detachably coupled to the secondary bus. The first monitoring circuit can be configured to receive, from a first bus via a node comprising one or more gates, a first beacon packet of a monitoring system of an industrial machine. The first beacon packet can include a first system frame schedule indicative of a plurality of time slices during which a plurality of data packets can be configured to be broadcasted on the first bus of the monitoring system. The first monitoring circuit can also be configured to determine, a first set of time slices of the plurality of time slices during which a first set of data packets including data characterizing one or more predetermined operating parameters are broadcasted on the first bus.

Abstract: The one or more processors of an electronic device execute program code. While executing the program code, measurements are performed on the electronic device to obtain first data. Further, execution of the program code is monitored to obtain second data, e.g., debug information. The measurements are coordinated with the monitoring of the execution of the program code.

Abstract: The disclosure herein describes determining the compliance of software applications to compliance standards based on capabilities of the software applications. The capabilities of a software application are identified, and the compliance controls of a compliance standard are identified from respective data stores. The capabilities are mapped to the compliance controls based on defined capability map data. Based on at least one capability of the software application being mapped to each compliance control of the compliance standard, a positive compliance indicator is provided, whereby compliance of the software application with the compliance standard is confirmed. The described systems and methods provide efficient means for determining compliance of software applications based on defined capabilities that are abstracted to be comparable to a variety of compliance controls.

Abstract: A computer-implemented method of training, using a computer log file, an application error prediction engine to identify one or more application errors includes parsing the computer log file into a plurality of data sets. Each data set is associated with a unique computing session having a session identifier and ending in an application or. The method also includes extracting, from each data set, values for a specified set of parameters in each data set. The method also includes encoding the extracted values for each data set into a corresponding data structure. The method also includes generating, for each data structure, a corresponding vector, the corresponding vectors collectively forming a matrix. The method also includes calculating, based on the matrix, a set of clusters, each cluster corresponding to a known error type, the set of clusters used to create a model used to identify new error types.

Abstract: A method that supports multithreading/concurrent programming debugging includes the following steps: setting breakpoints of program sections of multithreading; converting the breakpoints into context switch points; executing a planned execution sequence of an interleaving execution path, to start a specified thread to execute a program section thereof till a first execution environment change point; clicking a next thread of the interleaving execution path one after another, and executing the clicked next thread till a next context switch point; and recording and storing the interleaving execution path.

Abstract: A graphical user interface configured to facilitate replay debugging in distributed software programs is provided. In one or more examples, the graphical user interface provides a visual progress bar, wherein a position on the visual progress bar corresponds to a log file generated when the distributed software program is executed. The user can manipulate the graphical user to replay the log files and visualize the state of the playback through the visual progress bar. The graphical user interface can also allow the user to provide watch points and can allow the user to visualize variables that are contained within the log files. The watch points can represent one or more conditions. The log files can be analyzed to determine if they meet the condition specified in the watch point, and if the log files meet the condition, a visual indication can be provided on the visual progress bar.

Abstract: A method, system, and computer program product for tracking data flow in a given application on a computer are disclosed. In embodiments, the method comprises performing a contextual analysis of the given application to identify specified features; generating contextual tracking data for the given application; the contextual tracking data moving through the given application; tracing the movement of the contextual tracking data through the given application; generating specified information about the contextual tracking data and the movement of the contextual tracking data through the given application; recording a tracing log including this specified information; and creating a data flow sequence for the given application from the information in the tracing log. In embodiments of the invention, a data tracking software program is used for performing the contextual analysis of the given application and for generating the contextual tracking data.

Abstract: A system and method for automatically validated release candidates for data-driven applications includes monitoring a first microservice and a second microservice. A respective functionality of each microservice is independently verifiable. The method also includes determining whether at least one of the first microservice and the second microservice is updated. The first microservice includes a first liveness probe and the second microservice includes a second liveness probe. The method further includes, responsive to determining that the first microservice is updated, updating the first liveness probe using a first data schema. The first data schema is associated with the first microservice.