APPARATUS AND METHOD FOR REAL TIME ANALYSIS, PREDICTING AND REPORTING OF ANOMALOUS DATABASE TRANSACTION LOG ACTIVITY

摘要

An apparatus has a processor and random access memory connected to the processor. The random access memory stores instructions executed by the processor to capture database transaction data from a database transaction log. Transaction log aggregated information that augments the database transaction data into a format that does not exist in the database transaction log is formed. The format includes a new transaction log parameter added to an existing transaction log parameter. An anomaly report is issued in response to a discrepancy between the transaction log aggregated information and a model of normative database transaction log activity. The transaction log aggregated information is written to persistent memory after the issue of the anomaly report.