# US 11,030,184 B2 · Systems and methods for database active monitoring > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,030,184 B2 - Document ID: US11030184B2 - Status: Granted - Kind: B2 - Application number: 15/969,900 - Filed: 2018-05-03 - Published: 2018-11-08 - Granted: 2021-06-08 - Earliest claimed: 2017-05-04 - Assignees: JPMorgan Chase Bank, N.A. - Applicants: JPMorgan Chase Bank, N.A. - Inventors: Prakash Konkimalla; Christopher Medved - Web page: https://patentgrep.com/patent/US11030184B2 ## CPC - G06F 16/2365: {Ensuring data consistency and integrity} - G06F 11/3433: {for load management (allocation of a server based on load conditions G06F9/505; load rebalancing G06F9/5083; redistributing the load in a network by a load balancer H04L67/1029)} - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06F 21/554: {involving event detection and direct action} - G06F 2201/80: Database-specific techniques - G06N 20/00: Machine learning - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06N: COMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS ## Abstract System and methods for database active monitoring are disclosed. In one embodiment, in an information processing device comprising at least one computer processor, a method for database activity monitoring may include: (1) a database monitor monitoring data from a database system and a user session with the database system; (2) the database monitor comparing the monitored data to at least one threshold; (3) the database monitor executing an automated action in response to the monitored data breaching one of the thresholds; and (4) the database monitor initiating an alert based on the breached threshold. ## Claims ### Claim 1 A method for database activity monitoring, comprising: in an information processing device comprising at least one computer processor: a database monitor monitoring a plurality of user sessions associated with a database system, wherein the database system is monitored for abort statements, blocking user sessions, blocking on a system table, system database free space, excessive delay for one of the user session, and an availability of storage for user queries; the database monitor accessing both a system property file of the database system and a session property file for each user session, the session property file comprising session data for each corresponding user session; the database monitor comparing the session data to at least one threshold, wherein the at least one threshold is based on the session property file; the database monitor executing an automated action for one of the user sessions in response to the session data breaching one of the thresholds, wherein the automated action comprises aborting one of the user sessions; and the database monitor initiating an alert based on the breached threshold, wherein the alert comprises an identifier of the breached threshold, an identifier of the automated action, and an impact indicator of the user session or database system. ### Claim 2 (depends on 1) The method of claim 1, wherein the database system comprises a Teradata database. ### Claim 3 (depends on 1) The method of claim 1, wherein the session data is monitored for at least one of a blocked user session, a high CPU user session, a hung loads, a long running load, and a long running user session. ### Claim 4 (depends on 1) The method of claim 1, wherein the session data comprises at least one of a blocked user session, a high CPU user session, a hung loads, a long running load, and a long running user session. ### Claim 5 (depends on 1) The method of claim 1, further comprising: receiving the at least one threshold from at least one of the session property files. ### Claim 6 (depends on 1) The method of claim 1, wherein the system property file comprises data related to abort statements, blocking user sessions, blocking on a system table, system database free space, excessive delay for one of the user sessions, and the availability of storage for user queries. ### Claim 7 (depends on 1) The method of claim 1, wherein the at least one threshold is set based on machine learning. ### Claim 8 (depends on 1) The method of claim 1, further comprising: the database monitor retrieving custom data to process the alert. ### Claim 9 (depends on 8) The method of claim 8, wherein the alert comprises an identification of the breached threshold, an identification of the automated action taken, and an identification of a potential impact on the user session or database system. ### Claim 10 (depends on 1) The method of claim 1, wherein the step of monitoring the plurality of user sessions is continuous. ### Claim 11 A system for database activity monitoring, comprising: a database system having a user session therewith; and a database monitor comprising at least one computer processor; wherein: the database monitor monitors a plurality of user sessions associated the database system, wherein the database system is monitored for abort statements, blocking user sessions, blocking on a system table, system database free space, excessive delay for one of the user session, and an availability of storage for user queries; the database monitor accesses both a system property file of the database system and a session property file for each user session, the session property file comprising session data for each corresponding user session; the database monitor compares the session data to at least one threshold, wherein the at least one threshold is based on the session property file; the database monitor executes an automated action for one of the user sessions in response to the session data breaching one of the thresholds, wherein the automated action comprises aborting one of the user session; and the database monitor initiates an alert based on the breached threshold, wherein the alert comprises an identifier of the breached threshold, an identifier of the automated action, and an impact indicator of the user session or database system. ### Claim 12 (depends on 11) The system of claim 11, wherein the database system comprises a Teradata database. ### Claim 13 (depends on 11) The system of claim 11, wherein the session data is monitored for at least one of a blocked user session, a high CPU user session, a hung loads, a long running load, and a long running user session. ### Claim 14 (depends on 11) The system of claim 11, wherein the at least one threshold is received from at least one of the session property files, the at least one of the session property files comprises data related to at least one of a blocked user session, a high CPU user session, a hung loads, a long running load, and a long running user session. ### Claim 15 (depends on 11) The system of claim 11, wherein at least one threshold related to the monitored database system is received from the system property file, the system property file comprises data related to abort statements, blocking user sessions, blocking on a system table, system database free space, excessive delay for one of the user sessions, and the availability of storage for user queries.