Patent ID: 9390128
Filing Date: 2016-07-12
CPC Classification: G06F

Claim Text:
1. A method, comprising: a computer system receiving one or more access event logs from a first set of one or more storage devices, each access event log including access event records of access events to files stored on at least one of the first set of one or more storage devices, wherein each record includes one or more values for access event attributes; and the computer system using the access event records to store a plurality of segment files on a second set of one or more storage devices, wherein a first of the plurality of segment files includes access event data from a subset of the access event records associated with access events occurring during a first interval, and wherein a second of the plurality of segment files includes access event data from a subset of the access events records associated with access events occurring during a second interval distinct from the first interval; and wherein the access event data in the first segment file is arranged such that the access event data is able to be queried for a name of a user that accessed one or more of the files on the at least one storage device.