Patent ID: 9741017
Date: 2017-08-22
CPC Classifications: G06F,G06Q

Claim:
1. A method comprising: providing at least one change catalog; receiving, by a monitor server, change data associated with a plurality of changes to a target host, the target host providing the change data in response to detecting the plurality of changes, wherein the change data includes a rule that generated the change, an identifier of the target host from which the change data was collected, a specific element name associated with the change, and element data associated with the change; analyzing, by the monitor server, the change data in order to group the plurality of changes detected on the target host into clusters of changes based on the change data associated with the plurality of changes detected on the target host; and correlating, by the monitor server, the clusters of changes with the at least one change catalog in order to classify a portion of the clusters of changes relating to at least one potential reason for the plurality of changes in order to categorize at least some of the clusters of related changes, wherein at least one of the clusters of changes is not correlated with information within the at least one change catalog, the at least one uncorrelated cluster being without a potential reason as to the cause of the change data; after the analyzing and the correlating, determining, by the monitor server, for at least one of the uncorrelated clusters of related changes without a reason as to the cause of the change, at least one other potential reason for a portion of the plurality of changes captured on the target host in the at least one of the uncorrelated clusters; and updating the at least one change catalog with the at least one other potential reason.