Abstract: A framework and a method are provided for monitoring and managing software bots that collectively automate business processes. The method includes interfacing with the bots executing on a bot infrastructure. The method also includes obtaining the bot-specific performance data and the infrastructure-level performance data recorded by the bots and the bot infrastructure. The method further includes generating or modifying a bot dependency chain based on the bot-specific performance data and the infrastructure-level performance data. The bot dependency chain represents at least one of dependencies amongst the bots and dependencies amongst the related business processes. The method also includes generating an outcome for the business processes according to the bot dependency chain and the bot-specific performance data and the infrastructure-level performance data recorded by the bots and the bot infrastructure.

Abstract: A video coding mechanism is disclosed. The mechanism includes receiving a bitstream including image data coded in a plurality of slices. A top left tile identifier (ID) and a bottom right tile ID of a first slice are determined. Boundaries of the first slice are determined based on the top left tile ID and the bottom right tile ID. The first slice is decoded to generate a reconstructed image based on the boundaries of the first slice.

Abstract: Techniques are disclosed relating to a delayed presentation of authentication challenge for users, such as in the context of a chat session. In various embodiments, a server system receives an indication of a request for service initiated by a user in a chat session within an application executed by a client device. The request for service involves an authentication of the user that is dependent on the authentication being successfully completed within a particular time period after the authentication is initiated. The server system delays the initiation of authentication for the request for service until a readiness condition is satisfied. The readiness condition includes the server system being available to process the request for service, as well as subsequently detecting engagement with the user relating to the request for service. In response to the readiness condition being satisfied, the server system initiates the authentication of the user.

Abstract: A server computer includes a network communications interface, a memory configured to store a web page having an IP address, and a processor. The processor is configured to receive, via the network communications interface, a request for the web page. The request includes the IP address. The processor is also configured to identify a set of domain names referenced by the web page; resolve the set of domain names into a set of IP addresses; and transmit, in response to the request for the web page and via the network communications interface, a content and format of the web page. The content of the web page includes the set of IP addresses.

Abstract: Methods, non-transitory computer readable media, and peer devices are disclosed that facilitate network censorship circumvention. A censored peer sends to a rendezvous peer censored peer location information. A connection with a volunteer peer is then established using volunteer peer location information received from the rendezvous peer for a matched volunteer peer. First network traffic is then sent to the volunteer peer in accordance with a first network protocol using a second network protocol associated with the connection. The first network traffic is directed to a network host restricted with respect to the censored peer and the second network protocol is a peer-to-peer network protocol. Second network traffic responsive to the first network traffic is then extracted from network message(s) to thereby obtain access to the restricted network host via the volunteer peer. The first network messages are in accordance with the second network protocol and received via the connection.

Abstract: A base station may allocate wireless communication resources to configure a synthetic wireless communication signal for use as a radar signal. The synthetic wireless communication signal may be configured according to a wireless communication protocol of a wireless communication network that is associated with the base station. The base station may transmit, from an antenna and toward an area associated with the base station, the synthetic wireless communication signal. The base station may detect a reflected signal that is associated with the synthetic wireless communication signal. The base station may process the reflected signal to generate radar data; and perform an action associated with the radar data and the area.

Abstract: Systems and methods are provided for coupling data structures in different domains to provide cross-domain data access. One example computer-implemented method includes receiving, from a requestor, an access request including a case type and an indicator of a domain and determining a restriction associated with the domain. The method also includes compiling a first message key specific to the access request and transmitting the first message key to the requestor. The method further includes receiving an information request including a second message key and a query specific to a person, verifying the second message key based on the first message key, and coupling to a data structure in the domain. The method then includes, in response to verifying the second message key, submitting the query from the information request to the coupled data structure and providing a response to the query, from the data structure, to the requestor.

Abstract: Embodiments allow a tenant to customize a configuration that is used in accessing an application over the cloud. At a provisioning time, a user accesses a tenant Application Program Interface (API) and creates a customized configuration including a payload that defines particular features to be available from the application. Such features can include but are not limited to available buttons, toolbar options, and pages. During a runtime subsequent to the provisioning, an input to the application (such as a URL) is received from the tenant. Logic is executed to determine whether to apply the custom configuration or another configuration (e.g., default or other predefined) from a list. Based upon the configuration, the application renders output to the user according to the particular features. Particular embodiments may recognize a Line of Business (LoB) parameter of a URL input to the application in order to provide a configurations customized by the tenant.

Abstract: Techniques are disclosed relating to monitoring network traffic of an embeddable browser displayed by an application executing on a mobile computing device. In some embodiments, a first layer of the application manipulates one or more user interface elements displayed in the embeddable browser. The first layer of the application then detects network requests made by one or more application programming interfaces (APIs) executed by the embeddable browser in response to the manipulating. In some embodiments, the first layer sends to a second layer of the application results of observing network requests. In some embodiments, the second layer of the application displays, in real-time, information corresponding to the results of observing network requests.

Abstract: A method includes determining, by an analysis system, a system aspect of a system for an issue response communications evaluation. The method further includes determining, by the analysis system, at least one evaluation perspective and at least one evaluation viewpoint for use in performing the issue response communications evaluation on the system aspect. The method further includes obtaining, by the analysis system, issue response communications data regarding the system aspect in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating, by the analysis system, an issue response communications rating as a measure of system issue response communications maturity for the system aspect based on the issue response communications data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.

Abstract: Environment type validation can provide a tamper-resistant validation of the computing environment within which the environment type validation is being performed. Such information can then be utilized to perform policy management, which can include omitting verifications in order to facilitate the sharing of policy, such as application licenses, from a host computing environment into a container virtual computing environment. The environment type validation can perform multiple checks, including verification of the encryption infrastructure of the computing environment, verification of code integrity mechanisms of that computing environment, checks for the presence of functionality evidencing a hypervisor, checks for the presence or absence of predetermined system drivers, or other like operating system components or functionality, checks for the activation or deactivation of resource management stacks, and checks for the presence or absence of predetermined values in firmware.

Abstract: The present invention provides a joint optimization method and system for delay and spectrum occupation in a cloud-edge collaborative network. The method includes: initializing a cloud-edge collaborative network, and generating a set of user requests; establishing a target function of minimum average end-to-end delay and minimum spectrum slot occupation of a user request; during processing of each user request based on the target function, sequentially determining whether a node and path selection uniqueness constraint, a mobile edge computing (MEC) server load constraint, a spectrum resource occupation and uniqueness constraint, a spectrum continuity constraint, and a spectrum consistency constraint are satisfied, where if all constraints are satisfied, the user request is successfully processed, and the process turns to step S4; or if any constraint is not satisfied, the user request fails to be processed; and calculating average end-to-end delay and spectrum resource occupancy of the user request.

Abstract: An electronic communication network comprises a server platform and client data processing devices. Each client data processing device is configured to submit electronic messages to the server platform, provided with a timestamp. The server platform is configured to process incoming electronic messages strictly in a sequence corresponding to the timestamp. The electronic communication network comprising at least one switch, wherein the switch is arranged to receive electronic messages from a plurality of the client data processing devices. the switch comprises a buffer and is configured to store the electronic messages produced by the client data processing devices in the buffer, and to transfer the electronic messages in a manner sorted according to the timestamp provided to each electronic message by the time generator of the client data processing device submitting the electronic message, so that the electronic message with the oldest time is transferred first.

Abstract: A device may receive a first telemetry data entry associated with an attribute and store a record associated with the first telemetry data entry, wherein the record identifies a first context value associated with the attribute. The device may log a first timestamp of the first telemetry data entry in a lookup table, wherein the lookup table includes a mapping of the attribute to the first context value and to the first timestamp. The device may receive a second telemetry data entry associated with the attribute and may determine, from the mapping, that the second telemetry data entry is associated with a second context value that is different from the first context value. The device may determine whether a second timestamp, of the second telemetry data entry, is before the first timestamp. The device may perform an action based on whether the second timestamp is before the first timestamp.

Abstract: A system and method for accessing elements of a table in a digital image of the table, including: obtaining the digital image of the table; finding table elements in the digital image based on digital table properties, wherein the table elements define table cells; calculating coordinates of the table cells in the digital image based on the table elements; and accessing content of a selected table cell in the digital image using the coordinates of the selected table element.

Abstract: A method includes receiving a user indication to create an online collaborative team within an online chat environment. The method further includes receiving a user selection of members for the online collaborative team. The online collaborative team enables the selected members of the online collaborative team to communicate with one another. The online chat environment maintains communication of the members and activities of the members of the online collaborative team. The online chat environment makes the activities and the communication available to the members when the members are within the online chat environment. The method further includes accessing attributes associated with the members of the online collaborative team. The method, responsive to the accessing the attributes associated with the members, determines a privacy setting of the online collaborative team.

Abstract: A computer may receive a request to generate a snapshot view of the enterprise network infrastructure. The computer may implement a multithread process to contemporaneously query a plurality of blade servers and server enclosures within the entire network infrastructure. The computer may contemporaneously receive a plurality of information files from the queried network resources (e.g. the blade servers, server enclosures). An information file for a network resource may contain information of the network resource such as the operating status, currency (also referred to as assembly date), hardware serial number, firmware version, and/or other information of the network resources. Integrating the information in the received files, the computer may generate snapshot view file. The snapshot view file may be in hypertext markup language (HTML) format. The computer may transmit a selectable link to the snapshot view file to multiple user devices to be displayed in the respective web browsers.

Abstract: A network management system (NMS) is described that provides a granular troubleshooting workflow at an application session level using an application session-specific topology from a client device to a cloud-based application server. During an application session of a cloud-based application, a client device running the application exchanges data through one or more access point (AP) devices, one or more switches at a wired network edge, and one or more network nodes, e.g., switches, routers, and/or gateway devices, to reach a cloud-based application server. For a particular application session, the NMS generates a topology based on network data received from a subset of network devices, e.g., client devices, AP devices, switches, routers, and/or gateways, that were involved in the particular application session over a duration of the particular application session. In this way, the NMS enables backward-looking troubleshooting of the particular application session.

Abstract: A method and a system for managing power resources. One or more measurements received from one or more sensors communicatively coupled to at least one processor are processed. The sensors monitor and measure at least one of: one or more operational parameters associated with operation of at least one equipment, one or more external parameters associated with an environment of the equipment, and one or more power parameters associated with a power consumption by the equipment. Based on the processed one or more measurements, one or more future operational parameters associated with an operation of the are determined. The operation of the equipment is controlled using the determined future operational parameters.

Abstract: A system and method for cybersecurity reconnaissance, analysis, and scoring that uses distributed, cloud-based computing services to provide sufficient scalability for analysis of enterprise IT networks using only publicly available characterizations. The system and method comprise an in-memory associative array which manages a queue of vulnerability search tasks through a public-facing proxy network. The public-facing proxy network has search nodes configurable to present the network to search tools in a desired manner to control certain aspects of the search to obtain the desired results. A distributed data processing engine and cloud-based storage are used to provide scalable computing power and storage. A data packet modifier is used to reveal the IP address of a threat actor behind a port scan and subsequently block the threat actor. Each of the cloud-based computing services is containerized and orchestrated for management and efficient scaling purposes.

Abstract: A method for multi-instance learning (MIL)-based classification of a streaming input is described. The method includes running a first biased MIL model using extracted features from a subset of instances received in the streaming input to obtain a first classification result. The method also includes running a second biased MIL model using the extracted features to obtain a second classification result. The first biased MIL model is biased opposite the second biased MIL model. The method further includes classifying the streaming input based on the classification results of the first biased MIL model and the second biased MIL model.

Abstract: Data processing systems and methods, according to various embodiments, are adapted for determining a categorization for each tracking tool that executes on a particular webpage based on a variety of criteria, such as the purpose of the tracking tool and its source script. The system may compare the characteristics of tracking tools on a webpage to a database of known tracking tools to determine the appropriate categorization. When a user visits the webpage, the system analyzes these categories and determines whether the tracking tool should be permitted to run based on the categories and/or other criteria, such as whether the user has consented to the use of that type of tracking tool.

Abstract: Example aspects include techniques for employing cross-service diagnostics for cloud service providers. These techniques may include dynamically generating a workflow of one or more diagnostic modules based on relationship information between an origin service experiencing an incident and one or more related services that the origin service depends on, and executing the workflow of one or more diagnostic modules to determine a root cause of the incident, each of the one or more diagnostic modules implemented by an individual service of the one or more related services in accordance with a schema. In addition, the techniques may include determining a diagnostic action based on the root cause, and transmitting, based on the diagnostic action, an engagement notification to a responsible entity.

Abstract: A PCIe controller and a loopback path using the PCIe controller. The PCIe controller includes: a transport layer transmission module, a transport layer reception module, a memory access module, and a memory, wherein the transport layer transmission module includes a first loopback control module, the transport layer reception module includes a second loopback control module, and the first loopback control module is coupled to the second loopback control module; the memory access module is coupled to the transport layer transmission module and the transport layer reception module, and the memory access module is also coupled to the memory.

Abstract: Systems and techniques for a memory-side cache directory-based request queue are described herein. A memory request is received at an interface of a memory device. One or more fields of the memory request are written into an entry of a directory data structure. The identifier of the entry is pushed onto a queue. To perform the memory request, the identifier is popped off of the queue and a field of the memory request is retrieved from the entry of the directory data structure using the identifier. Then, a process on the memory request can be performed using the field retrieved from the entry of the directory data structure.

Abstract: A technique for performing load balancing between storage nodes includes generating a first performance metric for volumes accessed through a first storage node and generating a second performance metric for volumes accessed through a second storage node. The volumes accessed through the first storage node include a set of volumes that belong to a NAS (network-attached storage) file server hosted by the first storage node. In response to detecting a load imbalance based on the first performance metric and the second performance metric, the technique further includes moving the NAS file server from the first storage node to the second storage node and hosting the set of volumes that belong to the NAS file server from the second storage node.

Abstract: Techniques for enabling fast user access to the desktop computing environment of a remote computer via a user device in response to notification of a change in the display screen of the remote computer. The techniques include specifying an area of the display screen, setting a policy for determining whether to notify a subscribed user of a change within the specified display screen area, generating a notification packet containing information for validating the subscribed user and establishing a connection to the remote computer, encrypting the notification packet, sending or pushing the notification packet to the user device of the subscribed user, decrypting the notification packet, extracting the information for validating the subscribed user and establishing the connection from the notification packet, and constructing and rendering an image of a shortcut icon on a display of the user device for providing fast user access to the remote computer desktop computing environment.

Abstract: Systems and apparatuses for generating customized driving assistance outputs are provided. The system may collect initial sensor data from a rotating mobile device. The system may analyze the initial sensor data to determine whether to collect additional sensor data. Based on analysis of the initial sensor data and the additional sensor data, the system may determine a customized driving assistance output. The system may determine one or more notification outputs and one or more instruction outputs for the driver based on the customized driving assistance output. The system may update an aggregate driving output based on whether or not the instruction output was completed, as determined from subsequent sensor data.

Abstract: Embodiments of the present invention provide a method and apparatus for remotely accessing a computer system or network to identify storage devices and to retrieve metadata from the storage devices that are respectively unique to files stored in the storage devices. The metadata provides information regarding each file stored on the storage devices and each metadata is associated with a respective file. A scanning tool compares the metadata retrieved from the computer system or network to a database or list of known metadata of known restricted content. Metadata retrieved from the computer system or network that matches metadata from the database or list of known restricted content is flagged and the file associated with the matching metadata is flagged and reported as potentially storing restricted content. During the scanning, restricted content itself is not scanned, not copied, not transferred and not stored.

Abstract: Energy consumption modelling requires to consider various factors affecting the energy consumption in buildings, to be able to effectively forecast future consumption. Even though some of the state of the art deep learning based approaches are able to address these requirements to some extent, they are computationally heavy. The disclosure herein generally relates to energy forecasting, and, more particularly, to a method and system for graph signal processing (GSP) based energy modelling and forecasting. The system monitors and collects information on energy consumption in a building and values of associated energy consumption parameters. This input data is further processed using GSP to generate a building energy consumption model, from which a smooth signal is obtained by applying total variation minimization. The system further performs forecasting using the smooth signal.

Abstract: A method and system for modeling a cloud environment as a security graph are provided. The method includes identifying security objects in the cloud environment; collecting object data of the identified security objects; constructing security graph based on collected object data of the identified security objects; determining relationships among the identified security objects, wherein the relationships are determined based on the collected object data of the identified security objects and using a static analysis process; updating the constructed security graph with the determined relationships among the identified security objects; and storing the constructed security graph in a graph database.

Abstract: A propagation server for facilitating propagation of recorded information between first-party data structures associated with different domains, the propagation server arranged for data communication via a network with web browsers of client devices, wherein the propagation server is associated with a propagation domain being a web domain, wherein the propagation server is configured to: receive a first request from a first web browser, said first web browser associated with a first client device, wherein the first request identifies a first domain being a web domain different to the propagation domain; determine, via data communication with the first web browser, whether a propagation data structure, being a first party data structure associated with the propagation domain, is present on the first web browser; in a case where the propagation data structure is present: determine an identifier from information stored with the propagation data structure; generate first propagation information in dependence on t

Abstract: Systems and methods are provided for discoverability detection of network services. The present disclosure provides for a cloud-based network insight server that collects performance information of a network and a network agent, communicating with the cloud-based network insight server, that monitors discoverability of network services hosted by devices on the network. The network agent receives configuration information from the cloud-based network insight server and transmits discoverability states of the devices to the cloud-based network insight server based on executing a service discovery process through an access point on the network.

Abstract: Systems and methods are disclosed for accessing first party Internet cookies. One method includes receiving, over an electronic network, a request for an electronic advertisement or an Internet cookie, wherein the request is received in response to a user requesting content from a subdomain of an advertising entity domain; and sending, to a device associated with the user, an Internet cookie having the subdomain of the advertising entity domain. The method further includes receiving, from the device associated with the user, a request for content from the subdomain of the advertising entity domain, wherein the request is received in response to the user requesting content from a domain of an online publisher; and accessing data stored in the Internet cookie sent to the device associated with the user.

Abstract: In one embodiment, an apparatus comprises circuitry, wherein the circuitry is configured to: receive, via a communications network, context information for a first set of one or more edge devices, wherein the context information identifies an operating environment of the first set of edge devices based on information from one or more sensors; receive, via the communications network, workload information for a second set of one or more edge devices; determine workload assignments for the first set of edge devices based on the context information for the first set of edge devices and based on the workload information for the second set of edge devices; and transmit, via the communications network, the workload assignments to the first set of edge devices.

Abstract: An apparatus comprises a processing device configured to receive, at a user interface of a trust platform configured to manage cloud assets operating in clouds of two or more cloud service providers, a specification of security and compliance policies of a given entity. The processing device is also configured to generate, based at least in part on the specified security and compliance policies of the given entity, security and compliance controls to be implemented for workloads of the given entity running on a subset of the cloud assets operating in the clouds of the two or more cloud service providers. The processing device is further configured to deploy, utilizing application programming interfaces of the trust platform, the generated security and compliance controls on first and second pluralities of monitoring tools operating in tenant and management environments of the clouds of the two or more cloud service providers.

Abstract: User reputation regarding exposure of data objects in a cloud computing environment is determined. Behavioral information, which indicates behavior of a user for a cloud computing environment corresponding to one or more data objects in the cloud computing environment that are associated with the user, is analyzed. Based on analyzing the behavior information, a plurality of characteristics for the user that indicate exposure of the data object(s) associated with the user is determined. Each of the plurality of characteristics reflects the behavior of the user pertaining to the one or more data objects. Based on compliance of the plurality of characteristics with corresponding ones of a plurality of rules, a reputation of the user for exposing data objects in the cloud computing environment is determined. The reputation of the user is indicated to an entity with which the user is associated.

Abstract: Systems, computer-readable media, and methods are disclosed for parallel data processing for service function chains with network functions spanning multiple servers. An example system includes a first server hosting a first network function of a service function chain, a second server hosting a second network function of the service function chain, a mirror function deployed in a first switch to replicate a plurality of packets received by the system and to send respective copies of the plurality of packets to the first network function and to at least one of the second network function and a third network function of the service function chain, and a merge function deployed in a second switch to merge respective outputs of the first network function and the at least one of the second network function and the third network function.

Abstract: A method of discovering edge-servers and services through domain name server (DNS) resolution in a mobile edge computing (MEC) platform based network is provided. The method includes communicating a DNS-query from a user-equipment to a DNS server, wherein DNS query pertains to a user-request for accessing one or more web-based services. The user equipment (UE) receives, from the DNS server, a response comprising details with respect to a plurality of available-servers configured for rendering the web-based services. The details comprises at-least one of, an indication of the server being edge server associated with the MEC platform or a remote-server, a location of the server, and one or more services associated with the server. Each of the available servers are evaluated by the UE based on the response at-least based on the plurality of associated services and a distance of the server with respect to the UE.

Abstract: In one embodiment, webpage data for a webpage is downloaded by a web browser executed by a client device. The client device inserts instrumentation into the webpage data to collect event metrics for events associated with the webpage. The client device selects, based on a user-defined policy, a set of event metrics from among the collected event metrics to be shared with a proxy service. The client device sends the selected set of event metrics to the proxy service. The proxy service provides access to the set of event metrics to one or more collectors registered with the proxy service.

Abstract: A building device including one or more memory devices configured to store instructions thereon, that, when executed by one or more processors, cause the one or more processors to implement a software gateway configured to receive one or more messages from building equipment, receive, based on the one or more messages, one or more software updates for the software gateway, wherein the one or more software updates are updates for communicating with the building equipment, communicate with the building equipment based on the one or more software updates and receive data describing the building equipment, and cause a configuration image to be generated for the software gateway based on the data describing the building equipment, the configuration image indicating a configuration of the software gateway for performing one or more gateway services.

Abstract: This application relates to embodiments for providing a content stream to a device from a content server based on a protocol that is established between the device and an account server. The account server can initiate a session with the device and provide the device with a list of channels available for a user account associated with the device. When a channel is selected at the device, conditional access information can be provided from the account server to the device, which can thereafter relay the conditional access information to the content server. The content server can use the conditional access information to verify that the device has the appropriate permission to receive streaming content. In this way, because the conditional access information originates at the account server, permission to access streaming content can be managed by correspondence between the account server and the device, rather than the content server.

Abstract: A location of a client in a private network where the client has a plurality of interfaces for using a plurality of internet gateways for coupling with the public internet can be determined by sending, from the client, a plurality of STUN BINDING requests to a STUN server connected to the public internet that each exit through an individual internet gateway, receiving, at the client, a plurality of STUN BINDING responses from the STUN server that each include public IP address mapped to the internet gateway through which the STUN BINDING request has exited the private network, sending, from the client, a plurality of location requests that each include a mapped public IP address and the corresponding private IP address, to a location server for looking up location data for the respective private IP addresses so the client can receive location data relating to the public IP addresses.

Abstract: A method and system are disclosed. The method and system include receiving, at a wrapper, a communication and a context associated with the communication from a client. The communication is for a data source. The wrapper includes a dispatcher and a service. The dispatcher receives the communication and is data agnostic. The method and system also include providing the context from the dispatcher to the service. In some embodiments, the method and system use the service to compare the context to a behavioral baseline for the client. The behavioral baseline incorporates a plurality of contexts previously received from the client.

Abstract: The described technology relates to a logging framework wherein identifiers are associated with various elements within a web application, such as pages within the application and portions of pages within the application. Additional identifiers may be associated with sessions within the application, instances of page visits within the application, and other facets of the application and user interactions with the application. The identifiers can be used to generate a log that indicates, among other information, a history of interactions performed by a user navigating the application.

Abstract: Aspects of the disclosure are directed to monitoring, alerting, and/or root causing network problems based on current network behavior and network events at any instant in time using a network behavior model. The network behavior model can learn and be updated with network states and events to correlate network problems and determine root causes of the network problems for alerting and/or automatic correction.

Abstract: In an approach for visualizing metrics towards optimizing application performance, a processor identifies an application, running in a user interface, on a cloud platform. A processor calculates information metrics of the application. A processor presents the information metrics on the user interface with the application.

Abstract: A non-transitory computer-readable storage medium stores computer-readable instructions for a terminal device including a processor. The computer-readable instructions, when executed by the processor, causes the terminal device to perform: generating a plurality of sets of label data for creating a plurality of print labels, each set of label data including print data and attribute specification information; acquiring a plurality of sets of medium type information for a plurality of printing devices, each set of medium type information indicating a type of a printing medium mounted in the corresponding printing device; determining a plurality of output destinations for the plurality of sets of print data from among the plurality of printing devices on the basis of the plurality of sets of label data and the plurality of sets of medium type information; and transmitting each of the plurality of sets of print data to the corresponding output destination.

Abstract: The subject technology receives, from a first client device, a set of requests for recording user activity detected on a mobile application executing on the first client device. The subject technology determines that a first request from the set of requests includes a change in position for an element of a screen of the mobile application. The subject technology determines a previous timestamp of a set of previous properties including a previous change in position for the element of the screen. The subject technology determines a transition time between a current timestamp and the previous timestamp. The subject technology generates, using a style sheet language, a linear transition based at least in part on the transition time. The subject technology adds the linear transition to a style of a markup language element corresponding to the element.

Abstract: Automated event monitoring is performed utilizing a Knowledge Graph (KG) constructed by grouping and consolidation of a variety of log Entry Types. A log entry is received by a knowledge graph parser (Kg parser). That parser finds contiguous sub-strings in a log entry that have a parameterized basic-format. The parser figures out which basic-formats are present, where, and with which parameters. Given a sub-string, its basic-format and its parameters, the parser can correctly parse the sub-string to components (e.g., keys and values if a key-value format; fields if a structured format). A result of the parsing is an entity type tree structure. Next, a grouping and consolidation capability functions to modify the KG to incorporate an incoming new entry type structure. The KG may be consumed by a user (e.g., visualization; querying), and may provide an artifact to an event monitoring system to automatically trigger certain actions (e.g., alerts).