Virtual private cloud flow log event fingerprinting and aggregation
US-10764315-B1 · Sep 1, 2020 · US
US12436954B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-12436954-B2 |
| Application number | US-202016896990-A |
| Country | US |
| Kind code | B2 |
| Filing date | Jun 9, 2020 |
| Priority date | Oct 14, 2019 |
| Publication date | Oct 7, 2025 |
| Grant date | Oct 7, 2025 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
Event processing techniques for updating a database in real time based on events in a continuous event stream are disclosed. The techniques can update the database to incorporate information from thousands of received events per second. The events can include metrics measuring milestones for an organizational process defined by a user. Moreover, multiple streams can include metrics from many tenants concurrently. The techniques include receiving, from a first user device, information identifying a group identifier for a first action object. The techniques then include assigning the identifier to the first action object and to at least one other action object. The techniques then include transmitting, to a service provider, data identifying the assignment of the group identifier, receiving second information identifying events processed by the service provider, identifying events corresponding to the identifier, and generating a user interface configured to present elements corresponding to the identified events.
Opening claim text (preview).
What is claimed is: 1. A method, comprising: receiving, by a computing device and from a first user device, first information that identifies a group identifier for a first action object of a plurality of action objects, the plurality of action objects associated with a process flow; assigning, by the computing device, the group identifier to the first action object and to at least one other action object transmitting, by the computing device and to a service provider, data that identifies the assignment of the group identifier to the first action object and to the at least one other action object, the service provider comprising an in-memory stitching engine configured to process events associated with the process flow within a random access memory (RAM) of the service provider to create a single in-memory record corresponding to the process flow and indicating at least one of the first action object or the at least one other action object in the RAM of the service provider from a plurality of in-memory records in the RAM of the service provider prior to updating a database, wherein each of the plurality of the in-memory records comprises a respective timestamp and the single in-memory record comprises a single time attribute corresponding to a latest timestamp of the respective timestamps, and wherein identifier (ID) federation is performed on the first action object and the at least one other action object prior to in-memory stitching; determining, by the computing device, whether the database comprises an entry corresponding to the group identifier; in response to determining that the database comprises one or more entries corresponding to the group identifier; replacing, by the computing device, the one or more entries with the single in-memory record; in response to determining that the database does not include an entry corresponding to the group identifier: generating, by the computing device, an entry in the database corresponding to the group identifier, the entry comprising the single in-memory record; receiving, by the computing device and from the service provider, second information that identifies events processed by the service provider, the second information comprising the single in-memory record from the RAM of the service provider; identifying, by the computing device, which of the received events correspond to the group identifier; generating, by the computing device, a user interface configured to present elements that correspond to the identified events; providing, by the computing device, the user interface to the first user device for presenting a dashboard that includes the elements that correspond to the identified events; and removing, by the computing device, the single in-memory record and the plurality of in-memory records from the RAM of the service provider based at least in part on the respective timestamps. 2. The method of claim 1 , further comprising generating, by the computing device, a configuration user interface configured to present the plurality of action objects for each of a plurality of workflows. 3. The method of claim 2 , wherein at least some of the plurality of workflows correspond to different respective applications executed on behalf of the first user device. 4. The method of claim 2 , further comprising providing, by the computing device, the configuration user interface for presentation at the first user device. 5. The method of claim 2 , wherein the at least one other action object corresponds to a different workflow of the plurality of workflows from a first workflow of the plurality of workflows that correspond to the first action object. 6. The method of claim 1 , wherein the first information is received from a configuration user interface of the first user device. 7. The method of claim 1 , wherein the in-memory stitching engine is configured to stitch events corresponding to at least one of the first action object or the at least one other action object. 8. The method of claim 1 , wherein the second information that identifies events processed by the service provider comprises event data that corresponds to at least one of the first action object or the at least one other action object. 9. The method of claim 8 , wherein the user interface is generated based at least in part on the first action object or the at least one other action object corresponding to the group identifier. 10. A system, comprising: one or more processors; and a memory configured to store computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to: receive by a computing device and from a first user device, first information that identifies a group identifier for a first action object of a plurality of action objects, the plurality of action objects associated with a process flow; assign, by the computing device, the group identifier to the first action object and to at least one other action object; transmit, by the computing device and to a service provider, data that identifies the assignment of the group identifier to the first action object and to the at least one other action object, the service provider comprising an in-memory stitching engine configured to process events associated with the process flow within a random access memory of the service provider to create a single in-memory record corresponding to the process flow and indicating at least one of the first action object or the at least one other action object in the RAM of the service provider from a plurality of in-memory records in the RAM of the service provider prior to updating a database, wherein each of the plurality of the in-memory records comprises a respective timestamp, and the single in-memory record comprises a single time attribute corresponding to a latest timestamp of the respective timestamps, and wherein identifier (ID) federation is performed on the first action object and the at least one other action object prior to in-memory stitching; determining, by the computing device, whether the database comprises an entry corresponding to the group identifier; in response to determining that the database comprises one or more entries corresponding to the group identifier; replacing, by the computing device, the one or more entries with the single in-memory record; in response to determining that the database does not include an entry corresponding to the group identifier: generating, by the computing device, an entry in the database corresponding to the group identifier, the entry comprising the single in-memory record; receive, by the computing device and from the service provider, second information that identifies events processed by the service provider, the second information comprising the single in-memory record from the RAM of the service provider; identify, by the computing device, which of the received events correspond to the group identifier; generate, by the computing device, a user interface configured to present elements that correspond to the identified events; provide, by the computing device, the user interface to the first user device for presenting a dashboard that includes the elements that correspond to the identified events; and remove, by the computing device, the single in-memory record or the plurality of in-memory records from the RAM of the service provider based at least in part on the respective timestamps. 11. The system of claim 10 , wherein the one or more processors are further caused to generate a configuration user interface configured to present the plurality of action objects for each of a plurality of workflows. 12. The system of claim 1
Sequencing of tasks or work · CPC title
Presentation of query results · CPC title
Join operations · CPC title
Details of user interfaces specifically adapted to file systems, e.g. browsing and visualisation, 2d or 3d GUIs (query results presentation G06F16/156) · CPC title
Program or content traceability, e.g. by watermarking · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.