Virtual servers are monitored in real-time. A group of virtual servers from virtual server events occurring within a time window is identified by a computer system in real-time. A metric is determined for the group of virtual servers by the computer system in real-time using the virtual server events occurring within the time window for the group of virtual servers. A set of actions is performed by the computer system using the metric.

A method is disclosed. The method comprises analyzing, using a processing apparatus, event log entries of a plurality of devices, the plurality of devices forming part of a group of devices sharing a common attribute, wherein event log entries of a device relate to events that have taken place during a first period of interest in respect of that device. The method also comprises determining, using the processing apparatus, for a given device in the group of devices, based on the analysis of event log entries, a predicted entry that is expected to appear in the event log of the given device during the first period of interest. An apparatus and a machine-readable medium are also disclosed.

Embodiments of systems and methods for combining downlink signals representative of a communication signal are provided herein. An example method comprises receiving samples of the downlink signals from multiple antenna feeds; generating first symbols for a first signal and second symbols for a second signal based on performing timing recovery operations on the first signal and the second signal, respectively; generating offset information based on performing a correlator operation on the first and second symbols; and combining the first and second signals based on performing a weighted combiner operation. At least one of the first timing recovery operation, the second timing recovery operation, the correlator operation, and the combing are performed in a plurality of processing blocks in one or more processors, wherein the first and second processing block operate in parallel.

A method of generating action history data of an application according to an embodiment of the present disclosure is performed by a computing device. The method includes acquiring a first log generated by an application, acquiring a second log generated by a database (DB), matching application log entries included in the first log to DB log entries included in the second log, and generating action history data about actions performed by the application on the basis of a result of the matching.

An information processing system, method, and apparatus reduces maintenance costs and management work and expedites countermeasures. A guide for a new event is selected based on information transmitted from the monitoring target node at which the new event has occurred; whether a countermeasure designated by the guide selected for the new event can be executed or not is judged; under this circumstance, past events having similarity to the new event which has occurred at the monitoring target node are identified; and if countermeasures against a specified last number of the past events among the identified past events have been successful and a countermeasure against the past event which is the latest and is more similar to the new event among the past events identified as the new event has been successful, it is judged that the countermeasure designated by the guide selected by the guide selection unit should be executed.

A system and method are disclosed associated with a cloud computing environment. The system includes a tracing tool, coupled to a controller in the cloud computing environment, that captures sequences of events associated with the controller and a deployed workload. A detection engine may detect important event patterns in the sequences captured by the tracing tool using a PrefixSpan algorithm in connection with a specific controller action associated with the deployed workload. A neural network, trained with the detected important event patterns, may predict which important event patterns caused the controller to perform the specific action associated with the deployed workload.

An information processing apparatus 2000 executes analysis for an event history set (10). The event history set (10) is a set of a plurality of event histories (12). The event history (12) is information relating to an event generated in a target computer system. The information processing apparatus 2000 selects, based on a result of the analysis, an event history (12) to be excluded from deletion targets. The information processing apparatus (2000) deletes, from the event history set (10), an event history (12) other than the event history (12) excluded from the deletion targets.

A method and system for verifying state monitor reliability in hyper-converged infrastructure (HCI) appliances. Specifically, the method and system disclosed herein entail using a supervised machine learning model—i.e., a classification decision tree—to accurately distinguish whether conflicting event notifications, logged across multiple state monitors tracking state on an HCI appliance, are directed to a real event or a non-real event. The classification decision tree, generated based at least on information gains calculated for the multiple state monitors, may reflect which state monitor(s) is/are more reliable in accurately classifying the conflicting event notifications.

A method includes maintaining an event logging database including entries corresponding to events processed at local servers. The method includes, in response to receiving a first message from a first local server, where the first message indicates that a first event occurred, identifying a causal parent event preceding the first event. The causal parent event is a most recent event that occurred at the first local server. The method includes identifying a temporal parent event preceding the first event. The temporal parent event is a most recent event that occurred across all of the plurality of local servers. The method includes generating a new entry based on data from the first message, an identifier of a first entry recording the causal parent event, and an identifier of a second entry recording the temporal parent event. The method includes adding the new entry to the event logging database.

A computer-implemented method according to one embodiment includes receiving data associated with a driver performing actions. At least some of the actions trigger events emitted by an event emitter. Information, from the received data, about the performed actions is logged in an action log. An event observer is instructed to log the events emitted by the event emitter that the event observer observes. The observed events are logged in an event log. The information of the action log and information of the event log is compared based on a rule, and a validity of the event emitter is determined based on results of the comparing. A computer program product according to another embodiment includes a computer readable storage medium having program instructions embodied therewith. The program instructions are readable and/or executable by a processor to cause the processor to perform the foregoing method.