Deriving and interpreting users collective data asset use across analytic software systems
First Claim
1. A method, comprising:
- utilizing at least one processor to execute computer code that performs the steps of;
receiving at least one heterogeneous system log from each of a plurality of systems, wherein each of the heterogeneous system logs comprises events corresponding to activities occurring within a system corresponding to the heterogeneous system log;
for each of the plurality of systems, analyzing the events contained within at least one corresponding heterogeneous system log to identify a plurality of entities, wherein each of the plurality of entities is associated with at least one of the activities, wherein each of the plurality of entities comprises attributes derived from metadata and a unique identifier;
identifying relationships, across the plurality of systems, between entities within the plurality of entities, wherein the identifying comprises utilizing cross-system entity information and identifying entities that are present across more than one of the plurality of systems by comparing at least one attribute of the plurality of entities and identifying a match of at least one attribute of the entities and identifying entities having a match as the same entity; and
linking (i) the entities having an identified relationship and (ii) the activities of those entities, wherein the linking comprises connecting the entities that are present across more than one of the plurality of systems.
1 Assignment
0 Petitions
Accused Products
Abstract
One embodiment provides a method, including: utilizing at least one processor to execute computer code that performs the steps of: receiving at least one heterogeneous system log from each of a plurality of systems, wherein each of the heterogeneous system logs comprises events corresponding to activities occurring within its corresponding system; for each of the plurality of systems, analyzing the events contained within its at least one heterogeneous system log to identify a plurality of entities, wherein each of the entities is associated with at least one of the activities; identifying relationships, across the plurality of systems, between entities within the plurality of entities; and linking (i) the entities having an identified relationship and (ii) the activities of those entities. Other aspects are described and claimed.
36 Citations
20 Claims
-
1. A method, comprising:
-
utilizing at least one processor to execute computer code that performs the steps of; receiving at least one heterogeneous system log from each of a plurality of systems, wherein each of the heterogeneous system logs comprises events corresponding to activities occurring within a system corresponding to the heterogeneous system log; for each of the plurality of systems, analyzing the events contained within at least one corresponding heterogeneous system log to identify a plurality of entities, wherein each of the plurality of entities is associated with at least one of the activities, wherein each of the plurality of entities comprises attributes derived from metadata and a unique identifier; identifying relationships, across the plurality of systems, between entities within the plurality of entities, wherein the identifying comprises utilizing cross-system entity information and identifying entities that are present across more than one of the plurality of systems by comparing at least one attribute of the plurality of entities and identifying a match of at least one attribute of the entities and identifying entities having a match as the same entity; and linking (i) the entities having an identified relationship and (ii) the activities of those entities, wherein the linking comprises connecting the entities that are present across more than one of the plurality of systems. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
-
11. An apparatus, comprising:
-
at least one processor; and a computer readable storage medium having computer readable program code embodied therewith and executable by the at least one processor, the computer readable program code comprising; computer readable program code that receives at least one heterogeneous system log from each of a plurality of systems, wherein each of the heterogeneous system logs comprises events corresponding to activities occurring within a system corresponding to the heterogeneous system log; computer readable program code that, for each of the plurality of systems, analyzes the events contained within at least one corresponding heterogeneous system log to identify a plurality of entities, wherein each of the plurality of entities is associated with at least one of the activities, wherein each of the plurality of entities comprises attributes derived from metadata and a unique identifier; computer readable program code that identifies relationships, across the plurality of systems, between entities within the plurality of entities, wherein the identifying comprises utilizing cross-system entity information and identifying entities that are present across more than one of the plurality of systems by comparing at least one attribute of the plurality of entities and identifying a match of at least one attribute of the entities and identifying entities having a match as the same entity; and computer readable program code that links (i) the entities having an identified relationship and (ii) the activities of those entities, wherein the linking comprises connecting the entities that are present across more than one of the plurality of systems.
-
-
12. A computer program product, comprising:
-
a computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising; computer readable program code that receives at least one heterogeneous system log from each of a plurality of systems, wherein each of the heterogeneous system logs comprises events corresponding to activities occurring within a system corresponding to the heterogeneous system log; computer readable program code that, for each of the plurality of systems, analyzes the events contained within at least one corresponding heterogeneous system log to identify a plurality of entities, wherein each of the plurality of entities is associated with at least one of the activities, wherein each of the plurality of entities comprises attributes derived from metadata and a unique identifier; computer readable program code that identifies relationships, across the plurality of systems, between entities within the plurality of entities, wherein the identifying comprises utilizing cross-system entity information and identifying entities that are present across more than one of the plurality of systems by comparing at least one attribute of the plurality of entities and identifying a match of at least one attribute of the entities and identifying entities having a match as the same entity; and computer readable program code that links (i) the entities having an identified relationship and (ii) the activities of those entities, wherein the linking comprises connecting the entities that are present across more than one of the plurality of systems. - View Dependent Claims (13, 14, 15, 16, 17, 18, 19)
-
-
20. A method, comprising:
-
obtaining a plurality of system logs from a plurality of systems, wherein each of the system logs is unique to a corresponding system and wherein the system logs comprise activities performed by entities on at least one data asset within at least one of the plurality of systems; associating at least one entity with each of the data assets by analyzing the system logs to identify at least one entity that performed an activity on the data asset, wherein each identified at least one entity comprises attributes derived from metadata and a unique identifier; identifying relationships between the entities across the plurality of systems by matching entities across the plurality of systems, wherein the identifying comprises utilizing cross-system entity information and identifying entities that are present across more than one of the plurality of systems by comparing at least one attribute of the plurality of entities and identifying a match of at least one attribute of the entities and identifying entities having a match as the same entity; and generating a relationship graph identifying the entities, data assets, and relationships between entities and data assets, wherein the generating comprises connecting the entities that are present across more than one of the plurality of systems and reflecting the connected entities within the relationship graph.
-
Specification