Patent ID: 8032779
Filing Date: 2011-10-04
Classification: G06F,H04L

Abstract:
1. A data processing system, comprising: a data repository configured to store a plurality of event message definitions for error messages, syslog messages, or other notification messages that may be obtained from one or more managed network elements; event annotation logic coupled to the data repository and configured to receive and store one or more annotations to each of the event message definitions, wherein each of the annotations specifies event context information to be collected in response to an associated event message and to be collected when an event indicated in the associated event message occurs; event forensics definitions generator logic coupled to the event annotation logic and configured to generate an event forensics definitions file capable of interpretation by the one or more managed network elements and comprising event type identifiers and context information identifiers for context information to be collected, and configured to cause distributing the event forensics definitions file to the one or more managed network elements before events occur.