Audit record aggregation in a storage network
AssigneePure Storage, Inc.
InventorsJason K. Resch, Wesley B. Leggette
Life of this patent
Estimating the term…
Abstract
A method for execution by a dispersed storage and task (DST) processing unit includes obtaining audit records for an audit object and determining when the audit object is complete. When the audit object is complete, aggregating the audit records of the audit object within the audit object by generating the audit object to include the audit records; generating identifier (ID) information and generating integrity information. Fields of the audit object are populated with the audit records, the ID information, and the integrity information and a name of the audit object is determined for storage of the audit object and the name of the audit object in a dispersed storage network (DSN).
Claims20
A method for execution by a storage processing unit that includes a processor, the method comprises:
- obtaining audit records, wherein each of the audit records indicates:
- a timestamp for a corresponding message, at least one event type code selected from a plurality of event type codes for a corresponding audit event of the corresponding message, and an identifier for a corresponding system entity associated with creation of the corresponding message, and wherein at least one of the audit records includes an object identifier and an operation type indicating one of:
- a write operation, a read operation, or a delete operation;
- aggregating a number of audit records over a period of time;
- generating an audit file to include the number of audit records and integrity information;
- and
- facilitating storage of the audit file by utilizing a name of the audit file that indicates a date.
A processing system of a storage network comprises:
- at least one processor;
- a memory that stores operational instructions that, when executed by the at least one processor, cause the processing system to perform operations that include:
- obtaining audit records, wherein each of the audit records indicates:
- a timestamp for a corresponding message, at least one event type code selected from a plurality of event type codes for a corresponding audit event of the corresponding message, and an identifier for a corresponding system entity associated with creation of the corresponding message, and wherein at least one of the audit records includes an object identifier and an operation type indicating one of:
- a write operation, a read operation, or a delete operation;
- aggregating a number of audit records over a period of time;
- generating an audit file to include the number of audit records and integrity information;
- and
- facilitating storage of the audit file by utilizing a name of the audit file that indicates a date.
A non-transitory computer readable storage medium comprises:
- at least one memory section that stores operational instructions that, when executed by a processing system of a storage network that includes a processor and a memory, causes the processing system to perform operations that include:
- obtaining audit records, wherein each of the audit records indicates:
- a timestamp for a corresponding message, at least one event type code selected from a plurality of event type codes for a corresponding audit event of the corresponding message, and an identifier for a corresponding system entity associated with creation of the corresponding message, and wherein at least one of the audit records includes an object identifier and an operation type indicating one of:
- a write operation, a read operation, or a delete operation;
- aggregating a number of audit records over a period of time;
- generating an audit file to include the number of audit records and integrity information;
- and
- facilitating storage of the audit file by utilizing a name of the audit file that indicates a date.
Dependencies are inferred from the claim text.