公开(公告)号：US20230124404A1

公开(公告)日：2023-04-20

申请号：US18074254

申请日：2022-12-02

Applicant: Fortinet, Inc.

Inventor： Jun He ,  Partha Bhattacharya ,  Jae Yoo

IPC: G06F9/50 ,  G06F9/54 ,  G06F9/48 ,  H04L9/40 ,  G06F9/38 ,  G06F16/182 ,  G06F16/27

Abstract: Systems and methods for adaptively provisioning a distributed event data store of a multi-tenant architecture are provided. According to one embodiment, a managed security service provider (MSSP) maintains a distributed event data store on behalf of each tenant of the MSSP. For each tenant, the MSSP periodically determines a provisioning status for a current active partition of the distributed event data store of the tenant. Further, when the determining indicates an under-provisioning condition exits, the MSSP dynamically increases number of resource provision units (RPUs) to be used for a new partition to be added to the partitions for the tenant by a first adjustment ratio. While, when the determining indicates an over-provisioning condition exists, the MSSP dynamically decreases the number of RPUs to be used for subsequent partitions added to the partitions for the tenant by a second adjustment ratio.

公开(公告)号：US20180375746A1

公开(公告)日：2018-12-27

申请号：US16001896

申请日：2018-06-06

Applicant: Fortinet, Inc.

Inventor： Jun He ,  Partha Bhattacharya

IPC: H04L12/26 ,  H04L12/24 ,  G06F21/55 ,  H04L29/08 ,  H04L29/06

CPC classification number: H04L43/065 ,  G06F21/552 ,  H04L29/08072 ,  H04L41/0681 ,  H04L41/069 ,  H04L41/5019 ,  H04L63/1416

Abstract: Dynamic reporting rates for a log management system are adaptively allocated. Each individual controller node device of plurality of controller nodes is initially allocated an EPS rate limit for submitting event records to a log management system (e.g., an SIEM log management system) out of a licensed EPS rate. When surges are detected, the log management system dynamically reallocates proportions of EPS rates, within the licensed EPS rate. The individual EPS rate limit for at least one collector node is adjusted in real-time for a specific controller node based on under usage by other collector nodes. Another technique is to prioritize or weight events causing the surge to determine adjustments to EPS rate.

公开(公告)号：US11531570B2

公开(公告)日：2022-12-20

申请号：US16815172

申请日：2020-03-11

Applicant: Fortinet, Inc.

Inventor： Jun He ,  Partha Bhattacharya ,  Jae Yoo

IPC: G06F9/50 ,  G06F9/54 ,  H04L9/40 ,  G06F16/182 ,  G06F16/27 ,  G06F9/48 ,  G06F9/38

Abstract: Systems and methods for adaptively provisioning a distributed event data store of a multi-tenant architecture are provided. According to one embodiment, a managed security service provider (MSSP) maintains a distributed event data store on behalf of each tenant of the MSSP. For each tenant, the MSSP periodically determines a provisioning status for a current active partition of the distributed event data store of the tenant. Further, when the determining indicates an under-provisioning condition exits, the MSSP dynamically increases number of resource provision units (RPUs) to be used for a new partition to be added to the partitions for the tenant by a first adjustment ratio. While, when the determining indicates an over-provisioning condition exists, the MSSP dynamically decreases the number of RPUs to be used for subsequent partitions added to the partitions for the tenant by a second adjustment ratio.

公开(公告)号：US20210286652A1

公开(公告)日：2021-09-16

申请号：US16815172

申请日：2020-03-11

Applicant: Fortinet, Inc.

Inventor： Jun He ,  Partha Bhattacharya ,  Jae Yoo

IPC: G06F9/50 ,  G06F9/54 ,  G06F9/48 ,  G06F9/38 ,  G06F16/182 ,  G06F16/27 ,  H04L29/06

Abstract: Systems and methods for adaptively provisioning a distributed event data store of a multi-tenant architecture are provided. According to one embodiment, a managed security service provider (MSSP) maintains a distributed event data store on behalf of each tenant of the MSSP. For each tenant, the MSSP periodically determines a provisioning status for a current active partition of the distributed event data store of the tenant. Further, when the determining indicates an under-provisioning condition exits, the MSSP dynamically increases number of resource provision units (RPUs) to be used for a new partition to be added to the partitions for the tenant by a first adjustment ratio. While, when the determining indicates an over-provisioning condition exists, the MSSP dynamically decreases the number of RPUs to be used for subsequent partitions added to the partitions for the tenant by a second adjustment ratio.

公开(公告)号：US10404558B2

公开(公告)日：2019-09-03

申请号：US16001896

申请日：2018-06-06

Applicant: Fortinet, Inc.

Inventor： Jun He ,  Partha Bhattacharya

IPC: G06F15/16 ,  H04L12/26 ,  H04L29/08 ,  H04L29/06 ,  G06F21/55 ,  H04L12/24

Abstract: Dynamic reporting rates for a log management system are adaptively allocated. Each individual controller node device of plurality of controller nodes is initially allocated an EPS rate limit for submitting event records to a log management system (e.g., an SIEM log management system) out of a licensed EPS rate. When surges are detected, the log management system dynamically reallocates proportions of EPS rates, within the licensed EPS rate. The individual EPS rate limit for at least one collector node is adjusted in real-time for a specific controller node based on under usage by other collector nodes. Another technique is to prioritize or weight events causing the surge to determine adjustments to EPS rate.

公开(公告)号：US10044578B2

公开(公告)日：2018-08-07

申请号：US15277965

申请日：2016-09-27

Applicant: Fortinet, Inc.

Inventor： Jun He ,  Partha Bhattacharya

IPC: G06F11/30 ,  H04L12/26 ,  H04L12/24 ,  H04L29/08 ,  H04L29/06

Abstract: Dynamic reporting rates for a log management system are adaptively allocated. Each individual controller node device of plurality of controller nodes is initially allocated an EPS rate limit for submitting event records to a log management system (e.g., an SIEM log management system) out of a licensed EPS rate. When surges are detected, the log management system dynamically reallocates proportions of EPS rates, within the licensed EPS rate. The individual EPS rate limit for at least one collector node is adjusted in real-time for a specific controller node based on under usage by other collector nodes. Another technique is to prioritize or weight events causing the surge to determine adjustments to EPS rate.

公开(公告)号：US20180091393A1

公开(公告)日：2018-03-29

申请号：US15277965

申请日：2016-09-27

Applicant: Fortinet, Inc.

Inventor： Jun He ,  Partha Bhattacharya

IPC: H04L12/26 ,  H04L12/24 ,  H04L29/08

CPC classification number: H04L43/065 ,  G06F21/552 ,  H04L29/08072 ,  H04L41/0681 ,  H04L41/069 ,  H04L41/5019 ,  H04L63/1416

Abstract: Dynamic reporting rates for a log management system are adaptively allocated. Each individual controller node device of plurality of controller nodes is initially allocated an EPS rate limit for submitting event records to a log management system (e.g., an SIEM log management system) out of a licensed EPS rate. When surges are detected, the log management system dynamically reallocates proportions of EPS rates, within the licensed EPS rate. The individual EPS rate limit for at least one collector node is adjusted in real-time for a specific controller node based on under usage by other collector nodes. Another technique is to prioritize or weight events causing the surge to determine adjustments to EPS rate.