Abstract: Methods, systems, and devices for techniques for error correction at a memory device are described. In some examples, as part of transmitting a command to access data stored at a memory device, a host device may transmit a combined error control code to the memory device that may be generated using the command and associated inversion information. The memory device may use the received combined error control code to perform an error control procedure on both the command and the inversion information. In some examples, while in a direct link error control code procedure mode, the host system may transmit a command to access data stored at the memory device. The host system may use a same pin or channel to transmit both an error control code for the command and an error control code for the associated data.

Abstract: A system for tracing transactions includes a system mapping engine configured to generate a multi-tier control point map based on linked transactions across one or more systems having different management software, wherein the linked transactions are identified from transaction records obtained from parsed source code and transaction data of the one or more source systems; and a tracing engine configured to trace the linked transactions across the one or more source systems based on the multi-tier control point map. The multi-tier control point map provides end-to-end transaction traceability via the linked transactions.

Abstract: An example embodiment may involve identifying local traces of related events within a plurality of event data repositories, wherein each of the event data repositories is respectively associated with a software application; using a clustering model, assigning the local traces into clusters; determining positive rules that define when pairs of the local traces are linked to a common global trace, and negative rules that define when the pairs are linked to different global traces; linking the pairs into global traces; iteratively training a similarity model to project the local traces into a vector space such that the pairs that are linked to common global traces exhibit a greater similarity with one another than the pairs that are linked to different global traces; and based on the similarity model as trained, linking further local traces to the global traces.

Abstract: An instrumentation analysis system processes data streams by executing instructions specified using a data stream language program. The data stream language allows users to specify a search condition using a find block for identifying the set of data streams processed by the data stream language program. The set of identified data streams may change dynamically. The data stream language allows users to group data streams into sets of data streams based on distinct values of one or more metadata attributes associated with the input data streams. The data stream language allows users to specify a threshold block for determining whether data values of input data streams are outside boundaries specified using low/high thresholds. The elements of the set of data streams input to the threshold block can dynamically change. The low/high threshold values can be specified as data streams and can dynamically change.

Abstract: A method for detecting, identifying, and mitigating advanced persistent threats in a computer network having one or more computers includes a processor in the computer network: receiving a request to access a resource in the computer network; identifying the request as originating from an application executing on the computer network; executing an anomaly operation to determine a behavior of the application is one of anomalous and not anomalous; executing a privilege operation to determine the request is one of permanently allowed and not-permanently allowed; granting access to the resource for both a non-anomalous-behaving application and a permanently allowed request; and generating and displaying, on a graphical user interface of the computer network, and prompt for either an anomalous-behaving application or a not-permanently allowed request.

Abstract: A method, a system, and a computer program product for analyzing error messages. A first error log generated as a result of an execution of at least one task of a computing system at a first instance is received. The first error log include a plurality of first error messages. A first association rules model is generated using the first error messages. The first association rules model includes a plurality of association rules defining one or more relationships. A second error log, including a plurality of second error messages, generated as a result of an execution of the task at a second instance is received and a second association rules model is generated using the second error messages. Based on the first and second association rules models, at least one error message pattern associated with execution of the at least one task is determined.

Abstract: Diffing a subject replayable trace against a comparison replayable trace includes identifying a first plurality of functions within a first sequence of instructions recorded in the subject trace, and identifying a second plurality of functions a second sequence of instructions recorded in the comparison trace. A first plurality of groups of the first plurality of functions, and a second plurality of groups of the second plurality of functions are identified. The first and second pluralities of groups are compared, including determining, based on an identity of each group, and on function(s) corresponding to the group, if each first group in the first plurality of groups is at least one of: equal to a second group in the second plurality of groups, a replacement of a second group in the second plurality of groups, deleted from the second plurality of groups, or inserted into the second plurality of groups.

Abstract: Devices and techniques for fatal error logging in a memory device are described herein. For example, a read request can be received for a component of the memory device. A fatal error indication of an error that prevents correct execution of read request can be detected. Diagnostic information for the failure indication can be collected. A response to the read request can then be made with a portion of the diagnostic information as payload instead of the user data that would have occupied the payload had the read succeeded. Metadata in the response can be used to communicate an error code.

Abstract: Disclosed techniques relate to automatically instrumenting a web application. In an aspect, a method identifies that a web application includes an event that is triggered by a user interaction. The method associates the event with a tracer that is configured to log tracing information based on an execution of a first set of operations caused by the event and to obtain a first measurement of performance of a first span. The method identifies, in the code, that the execution of a first set of operations causes a request to be made to a server. The method associates the request with the tracer. The tracer is configured to log tracing information based on an execution of a second set of operations caused by the request and to obtain a second measurement of performance of a second span that is a child span of the first span.

Abstract: A processor includes a range register to store information that identifies a reserved range of memory associated with a secure arbitration mode (SEAM) and a core coupled to the range register. The core includes security logic to unlock the range register on a logical processor, of the processor core, that is to initiate the SEAM. The logical processor is to, via execution of the security logic, store, in the reserved range, a SEAM module and a manifest associated with the SEAM module, wherein the SEAM module supports execution of one or more trust domains; initialize a SEAM virtual machine control structure (VMCS) within the reserved range of the memory that is to control state transitions between a virtual machine monitor (VMM) and the SEAM module; and authenticate the SEAM module using a manifest signature of the manifest.

Abstract: Systems and methods include obtaining statistics based on monitoring in a cloud-based system for a given time period; and, responsive to determining an arrangement of counters for N counters, storing each of M counters for the given time period as a plurality of records with each record including a record type, a possible offset to a next record in terms of a counter identifier (ID), and a counter value, wherein N and M are integers and M<<N, and wherein the arrangement is determined such that most frequently used counters occupy lower counter IDs. The systems and methods can further include updating the arrangement of the counters for the N counters, to perform an optimization such that the most frequently used counters occupy lower counter IDs.

Abstract: An electronic communication device includes a controller which controls, according to the number of bit data in which an error has occurred of packet data transferred in serial communication, whether to start logging of information about the error of the packet data or stop logging of information about the error of the packet data.

Abstract: There are provided systems and methods for tracking data flow through data services using a processing request identifier in callstack data. During processing requests with a service provider, each request is assigned a particular identifier, called a correlation identifier. The correlation identifier is stored in callstack data and may be used to map these individual data processing flows for the requests to the data processing services of the service provider used during the flows. Once the data flows are determined the actual used services may be identified. The mapping system may also provide for removal of erroneous callstack and reassembly of callstack data during asynchronous service calls. Additionally, the data flows may be used to see where multiple callstacks have divergent data flows. A service provider may utilize the data flows for determination of service usage rates.

Abstract: A ring replication system receives and redundantly stores electronic data for access by users. Two or more storage devices are configured in a ring and circulate received data to each other. At least one such device receives incoming data records from an external source. One storage device is designated as the ordering device for assigning a sequence order to each data record, and the assigned sequence order is circulated around the ring. After confirming that the assigned sequence order has been indexed within each storage device on the ring, data records may then be accessed by users. One or more access portals may be coupled to one or more storage devices in the replication ring for providing users with access to stored data records. Data records are accessed in accordance with the assigned sequence order. A related method for redundant storage of data records is also disclosed.

Abstract: A test apparatus is provided for use with a mainframe and an adapter. The test apparatus includes a logical adapter interface unit and a control system. The logical adapter interface unit is interposable between the adapter and the mainframe whereby an I/O signal transmittable from the adapter and to the mainframe is transmitted through the logical adapter interface unit. The logical adapter interface unit is configured to manipulate the I/O signal. The control system is coupled to the logical adapter interface unit and the mainframe and is configured to control manipulations of the I/O signal by the logical adapter interface unit to mimic a condition of I/O traffic being run through the adapter and to log a response of the mainframe to the manipulations.

Abstract: A computer-implemented method upgrades an edge network based on analysis by a learning model. The method includes identifying, in a network, a plurality of devices, where each device in the network is configured to provide data on at least one other device in the network. The method also includes determining capabilities of each device of the plurality of devices. The method further includes monitoring, for each device, capacity information and tasks performed during operation of the network. The method includes analyzing, based on the monitoring, each use of each device. The method also includes recommending, in response to the analyzing and by a learning model, a first upgrade to the network. The method further includes implementing the first upgrade.

Abstract: A system for collecting building environmental sensor data includes a first data collection device having a first transceiver that is configured to receive data from proximate building environmental sensors and a second transceiver that is configured to communicate with an external service. The device will, upon detecting that the first transceiver is within a receiving range of a first building environmental sensor, communicatively connect with the first building environmental sensor to receive a data stream that comprises sensor data captured by the first building environmental sensor. The device will continue to receive the data stream until the first transceiver either receives all of the sensor data or moves out of the receiving range. The device will repeat this process for additional building environmental sensors. The device will use its second transceiver to transfer the sensor data to the external service.

Abstract: A method includes, storing a set of valid codewords including: a first valid functional codeword representing a functional state of a controller subsystem; a first valid fault codeword representing a fault state of the controller subsystem and characterized by a minimum hamming distance from the first valid functional codeword; a second valid functional codeword representing a functional state of a controller; and a second valid fault codeword representing a fault state of the controller; in response to detecting functional operation of the controller subsystem, storing the first valid functional codeword in a first memory; in response to detecting a match between contents of the first memory and the first valid functional codeword, outputting the second valid functional codeword; in response to detecting a mismatch between contents of the first memory and every codeword in the first set of valid codewords, outputting the second valid fault codeword.

Abstract: Disclosed techniques relate to automatically instrumenting a web application. In an aspect, a method identifies that a web application includes an event that is triggered by a user interaction. The method associates the event with a tracer that is configured to log tracing information based on an execution of a first set of operations caused by the event and to obtain a first measurement of performance of a first span. The method identifies, in the code, that the execution of a first set of operations causes a request to be made to a server. The method associates the request with the tracer. The tracer is configured to log tracing information based on an execution of a second set of operations caused by the request and to obtain a second measurement of performance of a second span that is a child span of the first span.

Abstract: Embodiments disclosed herein provide for methods and systems for providing an enterprise synthetic monitoring framework, wherein the enterprise synthetic monitoring framework is configured to provide exhaustive end-to-end monitoring for a variety of applications and workflows including those that are browser and non-browser based, those that are implemented on mobile devices, and those that are implemented utilizing native protocols.

Abstract: Systems, apparatuses, and methods related log compression are described. In an example, a system log that identifies targeted data may be compiled in a memory resource during an execution of an operation using that memory resource. The system log may be analyzed utilizing a portion of the memory resource that would otherwise be available to be utilized in the execution of the operation. The system log may be compressed during the execution of the operation, the level or timing of such compression may be based on the analysis that occurs contemporaneous to or as a result of executing the operation. In some examples, compressing the system log may include discarding a portion of the system log. Compressing the system log may also include extracting the targeted data from the system log as the system log is being compiled and converting the extracted targeted data to structured data.

Abstract: Techniques for implementing an infrastructure orchestration service are described. In some examples, a declarative provisioner of the infrastructure orchestration service receives instructions for deployment of a resource. The declarative provisioner identifies that the deployment of the resource is a long-running task stores state information corresponding to the deployment of the resource. In certain embodiments, upon identifying that the deployment of the resource is a long-running task, the declarative provisioner pauses its execution of the long-running task. Responsive to a trigger received from the infrastructure orchestration service, the declarative provisioner resumes execution of the deployment of the resource using the state information and transmits deployment information corresponding to the deployment of the resource to the infrastructure orchestration service.

Abstract: A circuit device 10 includes a register 30, an access control circuit 20 that controls access to a nonvolatile memory 70 and loads setting data of the circuit device 10 stored in the nonvolatile memory 70 in the register 30, and an error detection circuit 40. The access control circuit 20 performs a refresh operation that reloads the setting data stored in the nonvolatile memory 70 in the register 30. The error detection circuit 40 reads data for comparison that has been reloaded in the register 30 from the register 30, compares the data for comparison that was read with an expected value of the data for comparison, and performs access control error detection based on the comparison result.

Abstract: In one example, a hardware accelerator comprises an event register that stores an event; a hardware execution engine; and a controller configured to: extract, from an instruction, parameters of an operation to be performed by the hardware execution engine, and a synchronization primitive of a plurality of synchronization primitives for the event; and based on the synchronization primitive, perform at least one of: controlling a start time of the operation at the hardware execution engine, or determining whether to access the event register. The synchronization primitives include a set operation to set the event and/or a wait operation to suspend the operation at the hardware execution engine until the event is set. The plurality of synchronization primitive defines different conditions to be satisfied in order to perform the set operation.

Abstract: Aspects pertaining to a crash dump file are described. In an example, the crash dump file may include one or more sections within which crash-related data is stored. A content file is also described which records valid parameters, wherein the valid section parameters pertain to corresponding sections within the crash dump file.

Abstract: A novel and useful system and method of accessing multi-dimensional data in memory. The invention is applicable to neural network (NN) processing engines adapted to implement artificial neural networks (ANNs). The NN processor is constructed from self-contained computational units organized in a hierarchical architecture. The homogeneity enables simpler management and control of similar computational units, aggregated in multiple levels of hierarchy. Computational units are designed with minimal overhead as possible, where additional features and capabilities are aggregated at higher levels in the hierarchy. On-chip memory provides storage for content inherently required for basic operation at a particular hierarchy and is coupled with the computational resources in an optimal ratio. Lean control provides just enough signaling to manage only the operations required at a particular hierarchical level.

Abstract: In one example implementation, a log analysis system can comprise an activity engine to monitor user activity of a computer system, a baseline engine to generate an expected baseline of a log, and an abnormality engine to compare the log to the expected baseline to identify an abnormality, compare the abnormality to a user activity volume based on a correlation between the user activity volume and the log activity, and classify the log.

Abstract: Described embodiments provide systems and methods for displaying a service graph in association with a time of a detected anomaly. A device may store a plurality of snapshots of a service graph of a plurality of microservices. Each of the snapshots of the service graphs include metrics at a respective time increment from execution of each of the plurality of microservices. The device may detect an anomaly with operation of one or more microservices of the plurality of services. The device may identify a set of snapshots of the service graph within a predetermined time period of a time of the anomaly. The device may display each of the snapshots in the set of snapshots of in sequence corresponding to time increments within the predetermined time period of the time of the anomaly.

Abstract: Systems and methods for monitoring a robotic process automation (RPA) system are provided. Job execution data for one or more jobs in the RPA system is determined based on logs of the RPA system. The job execution data for the one or more jobs in the RPA system is caused to be displayed in substantially real time.

Abstract: A system for capturing a trace of an NVME hard disc can include a BMC, a BIOS, a protocol analysis instrument, and a fixture plate comprising a processor and a dial switch. The BIOS is configured to acquire register error information of the PCIe link when an error occurs to a PCIe link where the NVME hard disc is located, and send the register error information to the BMC, and the BMC is configured to send the received information to the fixture plate, and the fixture plate is configured to trigger the protocol analysis instrument to capture a PCIe trace of the NVME hard disc when a current error type corresponding to the dial switch is consistent with the error type of the register error information parsed by a processor of the fixture plate.

Abstract: An operations server synchronizes updates to a cloud-based shared versioned file system. The shared versioned file system includes directories and sub-directories that are divided into shards. The operations server coordinates requests from local filer servers, each running a respective local version of the shared versioned file system, to update a shard in the cloud-based shared versioned file system. The operations server can provide a global lock on the shard to a local filer server before it updates the shard in the cloud-based shared versioned file system. Preferably, shards are sized dynamically based on the number of entries in the directories associated therewith.

Abstract: Disclosed techniques relate to automatically instrumenting a web application. In an aspect, a method identifies that a web application includes an event that is triggered by a user interaction. The method associates the event with a tracer that is configured to log tracing information based on an execution of a first set of operations caused by the event and to obtain a first measurement of performance of a first span. The method identifies, in the code, that the execution of a first set of operations causes a request to be made to a server. The method associates the request with the tracer. The tracer is configured to log tracing information based on an execution of a second set of operations caused by the request and to obtain a second measurement of performance of a second span that is a child span of the first span.

Abstract: A graphics processing system for operation with a data store, comprising: one or more processing units for processing tasks; a check unit operable to form a signature which is characteristic of an output from processing a task on a processing unit; and a fault detection unit operable to compare signatures formed at the check unit; wherein the graphics processing system is operable to process each task first and second times at the one or more processing units so as to, respectively, generate first and second processed outputs, the graphics processing system being configured to: write out the first processed output to the data store; read back the first processed output from the data store and form at the check unit a first signature which is characteristic of the first processed output as read back from the data store; form at the check unit a second signature which is characteristic of the second processed output; compare the first and second signatures at the fault detection unit; and raise a fault signal i

Abstract: A method may comprise collecting data from a core network, an operator network and a customer premise network. KPI values corresponding to one or more KPIs may be determined, based on the collected data. KQI values corresponding to one or more KQIs may be determined, based on the one or more of the determined KPI values. The determined KQI values may be output to an operator. In an embodiment, data collected from the core network may include data collected from one or more analyzer devices and head end probes. Data collected from a customer premise network may include data collected from last mile equipment or customer premise probes.

Abstract: An apparatus and method are described for aligning corresponding elements in multiple streams of elements. An apparatus is provided comprising both first generation circuitry to generate a first stream comprising first elements and second generation circuitry to generate a second stream comprising second elements. The first generation circuitry is arranged to insert a first element in the first stream to identify each occurrence of a corresponding second element in the second stream. Key generation circuitry is used to generate, for each instance of the first element to be included within the first stream, an associated key value determined from a set of key values, the set of key values being insufficient to allow unique key values to be generated for each instance of the first element. The first generation circuitry is then arranged to indicate within the first stream the associated key value for each instance of the first element.

Abstract: A system to facilitate application logging is described. The system includes a processor and a machine readable medium storing instructions that, when executed, cause the processor to record a system state, perform application logging at a first logging rate, record an occurrence of task failures during the logging, determine a predicted queue size threshold value based on the recorded occurrence of task failures, determine whether that the predicted queue size threshold value is less than an actual queue size and perform the application logging at a second logging rate upon a determination that the predicted queue size threshold value is less than an actual queue size, wherein the second logging rate is greater than the first logging rate.

Abstract: A system for validating data includes a digital touch point associated with an organization having an element and a quality assurance (QA) module for monitoring the digital touch point. The system includes a quality control (QC) algorithm associated with the QA module, which is executed against the new element to determine if one or more discrepancies exist between current data for the new element and expected data for the new element. The system includes a tangible error report that captures one or more discrepancies between the current data and the expected data for the new element. The QA module has the ability to modify the request to call to eliminate the one or more discrepancies.

Abstract: A computer-implemented method for analyzing spans and traces associated with a microservices-based application executing in a distributed computing environment comprises aggregating a plurality of ingested spans associated with one or more applications executing in the distributed computing environment into a plurality of traces, wherein each of the plurality of ingested spans is associated with a plurality of tags. The method further comprises comparing durations of a set of related traces of the plurality of traces to determine patterns for the plurality of tags and generating a histogram that represents a distribution of the durations of the set of related traces. The method also comprises providing alerts for one or more tags from the plurality of tags associated with traces having a duration above a threshold based on the distribution of the durations.

Abstract: An application processor includes a central processing unit, a root complex that communicates with at least one external device under control of the central processing unit and generates a state change interrupt when an operation state changes, and an interrupt aggregation and debug unit that performs debugging on at least one component associated with the state change interrupt depending on the state change interrupt.

Abstract: A method for detecting, identifying, and mitigating advanced persistent threats in a computer network having one or more computers includes a processor in the computer network: receiving a request to access a resource in the computer network; identifying the request as originating from an application executing on the computer network; executing an anomaly operation to determine a behavior of the application is one of anomalous and not anomalous; executing a privilege operation to determine the request is one of permanently allowed and not-permanently allowed; granting access to the resource for both a non-anomalous-behaving application and a permanently allowed request; and generating and displaying, on a graphical user interface of the computer network, and prompt for either an anomalous-behaving application or a not-permanently allowed request.

Abstract: An information processing apparatus includes a collection unit that collects a first history on a monitoring target device, a display unit that displays a history screen including at least a part of the first history collected by the collection unit, a receiving unit that receives an operator's operation to designate information included in the first history, on the history screen displayed by the display unit, and a generation unit that generates a second history in which the information designated by the operator is concealed, from the first history.

Abstract: Anomaly detection and filtering based on system logs is provided via receiving, at a first time, a first sequence of log entries from a networked system; generating, based on previously observed log entries including the first sequence of log entries, predicted log entries for a second time; receiving, at the second time, a second sequence of log entries from the networked system; determining whether the second sequence is anomalous based on comparing the second sequence with the predicted log entries; in response to determining that the second sequence is anomalous, determining whether the second sequence is noteworthy based on a function entropy of the first sequence and a sentiment polarity of the second sequence; and in response to determining that the second sequence is noteworthy, generating an anomaly report that includes the second sequence and a root cause.

Abstract: An image forming system for forming an image includes a storage unit that stores a log of the image forming system, and a controller to detect an abnormality of the image forming system based on the content of the log stored in the storage unit, and the controller controls to execute a recovery process of the image forming system according to a detection result of the abnormality. In this configuration, the image forming system detects complicated abnormality that occurs according to series of flows.

Abstract: A computing system includes persistent storage containing a plurality of groups of software instructions, wherein each respective group is linked with at least one other group. The computing system also includes a software application configured to perform operations, including determining an expected execution map representing expected paths that are expected to be followed between linked groups of software instructions. The operations also include monitoring interactions of a user with the plurality of groups, and based on the monitoring, determining an observed execution map representing observed paths that the user has followed between the linked groups of software instructions. The operations further include determining a disparity map representing a disparity between the expected paths and the observed paths by comparing the expected execution map to the observed execution map, and displaying the expected execution map, the observed execution map, and/or the disparity map.

Abstract: A system and method for determining enterprise metrics of an enterprise application is described. The system receives a root cause definition that identifies enterprise user metrics and predefined parameters for the enterprise user metrics. The enterprise user metrics identify operation metrics of the enterprise application by users of the enterprise. The system stores the root cause definition in a library of root causes definitions. The system receives a selection of a plan that identifies an operation attribute of the enterprise application. The system identifies a root cause from the library of root causes definitions based on the plan. The system generates a recommendation based on the identified root cause.

Abstract: A mechanism is described for facilitating fabric-based compression and/or decompression of data at computing devices. A method of embodiments, as described herein, includes compressing contents of a data stream traveling through an internal fabric between a source component and a destination component, wherein the contents are compressed on the internal fabric.

Abstract: Systems and methods for contextual event sequence analysis of system failure that analyzes heterogeneous system event record logs are disclosed. The disclosure relates to analyzing event sequences for system failure in ICT and other computerized systems and determining their causes and propagation chains.

Abstract: A compressed flow log can be created from flow log entries. Flow log entries include field values for flow log fields. The entries can be compressed based on tuples (e.g., primary tuple, secondary tuple, tertiary tuple, etc.) specified by tuple definitions that specify the flow log fields in tuple content values. A first primary tuple content value can be based on a primary tuple definition and the field values of a first flow log entry included in flow log entries. A first primary tuple symbol can be associated with the first primary tuple content value. The first flow log entry can be used to create a first compressed flow log entry that includes the first primary tuple symbol. The first compressed flow log entry can be included in the compressed flow log, and the compressed flow log can be transmitted to a flow log consumer.

Abstract: Disclosed is an electronic apparatus including a processor, and a memory configured to store instructions executable by the processor in which the processor is configured to: obtain state data about operations of a plurality of components in the electronic apparatus, identify a state error of a first component among the plurality of components based on the obtained state data, obtain error data about a correlation between the identified state error of the first component and a second component causing the state error among the plurality of components, identify possibility of occurrence of the state error of the first component based on the obtained state data and the obtained error data, and perform an error-related operation for the second component correlating with the state error of the first component.

Abstract: Techniques for memory management may include: allocating, from an allocation pool, buffers for logs used by processing cores; recording messages in the logs for the processing cores; responsive to filling a first buffer included in a first log used to record messages for a first of the plurality of processing cores, allocating a second buffer of the allocation pool for the first log; adding the second buffer to the first list of buffers for the first log; and adding the first buffer, that is included in the first list for the first log, to the allocation pool, wherein after adding the first buffer to the allocation pool, the first buffer is included in the first list of buffers for the first log and also included in the allocation pool. The buffers may be included in a distributed global memory portion of the same computing module as the processing cores.