Patent ID: 11914495
Assignee: TANIUM INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G

Claim 9:
10. A server system, wherein the server system is in communication with N respective machines in a collection of machines that comprise nodes in a linear communication orbit, where N is an integer greater than 2, wherein each respective machine of the N respective machines is configured to perform operations including:
automatically monitoring a predefined set of performance metrics of the respective machine, including memory usage, processor usage, and communication channel usage;
automatically persistently storing, locally at the respective machine, in a local database, the predefined set of performance metrics and metadata for events associated with processes executed by the respective machine;
the server system comprising:
one or more processors;
memory;
one or more programs stored in said memory, the one or more programs including instructions for:
transmitting a first query through the linear communication orbit to the N respective machines, each respective machine receiving the first query through one or more upstream machines along the linear communication orbit, wherein:
the first query includes a set of one or more rules; and
for each rule in the set of one or more rules, each respective machine identifies locally stored information responsive to the first query, based on the predefined set of performance metrics stored in the local database;

transmitting a second query through the linear communication orbit to the N respective machines, each respective machine receiving the second query though one or more upstream machines along the linear communication orbit;
receiving from each respective machine of the N respective machines a first report in response to the second query based on the locally stored information identified by the respective machine in response to the first query; and
generating a merged report presenting performance information with respect to a set of machines, including the N respective machines wherein the merged report is based on the first reports received from the N respective machines.