Source: https://patents.google.com/patent/US8635596B2/en
Timestamp: 2018-11-14 09:15:54
Document Index: 110985452

Matched Legal Cases: ['application No. 200780014114', 'Application No. 200780014114', 'Application No. 200780014114', 'application No. 200780014114', 'application No. 07752491', 'application No. 2009', 'application No. 2009']

US8635596B2 - Model-based event processing - Google Patents
US8635596B2
US8635596B2 US11379757 US37975706A US8635596B2 US 8635596 B2 US8635596 B2 US 8635596B2 US 11379757 US11379757 US 11379757 US 37975706 A US37975706 A US 37975706A US 8635596 B2 US8635596 B2 US 8635596B2
US20070250525A1 (en )
Event collection server 318 is accessible by event correlation module 320. In FIG. 3, event correlation module 320 is shown as residing in operations manager 300. It will be understood, however, that event correlation module 320 may reside in whole or in part outside of operations manager 300, or portions of event correlation module 320 may reside in operations manager 300—or on various other computers—at different times.
retrieving an abstract model of a managed computing system, the abstract model including managed entities having information pages containing encoded methods defining at least one of: installation; monitoring; discovery; or relationships of the managed entities in the managed computing system;
discovering a concrete model of the managed computing system based on the encoded methods in the information pages in the abstract model, the concrete model including discovered types of the managed entities and discovered concrete instances of relationships between the managed entities;
identifying events associated with the managed entities based on the encoded methods in the information pages in the abstract model;
viewing identifier fields of each event of the identified events, each identifier field indicating a relationship of a managed entity of the managed entities to an event of the identified events;
comparing the relationships indicated by the identifier fields of the identified events and the relationships discovered in the concrete model, the comparing comprising:
determining, based on the encoded methods in the information pages in the abstract model, that the managed entities have a direct relationship or an indirect relationship according to the concrete model;
determining that the relationships indicated by the identifier fields of the identified events are associated with the managed entities having the direct relationship or the indirect relationship according in the concrete model; and
determining that the identified events are correlated based on the determined direct relationship or the determined indirect relationship according to the concrete model.
2. A computer-implemented method as recited in claim 1, wherein the concrete model is expressed in a modeling language including at least one of: an XML Schema; a System definition Modeling language.
3. A computer-implemented method as recited in claim 1, wherein the managed entities include a domain, a computer, a sub net, a server, an application, an Internet gateway, a database, a disk, a service, a cost center, a data center, a website, a web service, and/or a process.
4. A computer-implemented method as recited in claim 1, wherein identifying the events comprises generating an event record commemorating each identified event, the event record including a reference to the managed entity with which the identified event is associated.
5. A computer-implemented method as recited in claim 1, wherein events include performance counters and metrics regarding a managed entity.
6. A computer-implemented method as recited in claim 1, further comprising issuing a report including information regarding correlated events and/or an alert.
7. A computer-implemented method as recited in claim 1, wherein identifying the events associated with the managed entities includes:
generating an event record for each identified event; and
8. A computer-implemented method as recited in claim 1, wherein the information pages containing encoded methods defining the relationships of the managed entities in the managed computing system include user defined statements, the user defined statements stating that managed entities in the managed computing system are directly related or indirectly related to other managed entities in the managed computing system.
creating a concrete model of the managed computing system comprising:
discovering types of the managed entities based on the encoded methods in the information pages in the abstract model, and
discovering concrete instances of relationships among the managed entities based on the encoded methods in the information pages in the abstract model;
generating information regarding the identified events associated with the managed entities, wherein generating the information comprises generating a record for each identified event including information regarding an identity of the managed entity associated with the identified event;
comparing the identity of each managed entity associated with each identified event and the relationships among the managed entities in the concrete model;
determining, based on the encoded methods in the information pages in the abstract model, that the managed entities associated with the identified events have a direct relationship or an indirect relationship defined by the concrete model; and
identifying as correlated events, identified events associated with managed entities having the direct relationship or the indirect relationship defined by the concrete model.
10. A computer-implemented method as recited in claim 9, wherein records are generated from customized instrumentation associated with each managed entity.
11. A computer-implemented method as recited in claim 9, further comprising issuing a report and/or an alert when correlated events are identified.
12. One or more computer-readable storage media storing computer-readable instructions that, when executed by one or more processors, cause the one or more processors to:
retrieve an abstract model of a managed computing system, the abstract model including managed entities having information pages containing encoded methods defining at least one of: installation; monitoring; discovery; or relationships of the managed entities in the managed computing system;
discover instances of types of the managed entities and relationships between the managed entities described in the encoded methods in the information pages in the abstract model to create a concrete model during a runtime of the managed computing system;
select events associated with the managed entities based on the encoded methods in the information pages in the abstract model;
retrieve records associated with the selected events from an event collection server;
determine associations between the selected events and the managed entities by examining a managed entity identifier in each record associated with each event, wherein a selected event is determined to be associated with a managed entity if the managed entity identifier in a record associated with the selected event matches an identity of the managed entity;
compare the associations indicated by the managed entity identifiers and the relationships between the managed entities discovered in the concrete model, the comparing comprising:
determining that the associations indicated by the managed entity identifiers are associated with the managed entities having the direct relationship or the indirect relationship according in the concrete model; and
correlate the selected events associated with the managed entities having a direct relationship or an indirect relationship according to the concrete model.
13. One or more computer-readable storage media as recited in claim 12, further comprising computer-readable instructions that, when executed by the one or more processors, cause the one or more processors to issue a communication when correlated events are identified.
EP20070752491 EP2024823A4 (en) 2006-04-21 2007-03-08 Model-based event processing
US20070250525A1 true US20070250525A1 (en) 2007-10-25
US8635596B2 true US8635596B2 (en) 2014-01-21
EP (1) EP2024823A4 (en)
JP2005538459A (en) 2002-09-11 2005-12-15 インターナショナル・ビジネス・マシーンズ・コーポレーションＩｎｔｅｒｎａｔｉｏｎａｌ Ｂｕｓｉｎｅｓｓ Ｍａｓｃｈｉｎｅｓ Ｃｏｒｐｏｒａｔｉｏｎ Method and apparatus for determining the root cause identification and problems in a distributed system
JP2006510133A (en) 2002-11-14 2006-03-23 エスアーペー アーゲーＳａｐ Ａｇ Modeling system for graphical user interface associated application and cross-reference
Atif Memon et al. , "Coverage Criteria for GUI Testing" , ACM, 2001, , p. 1-12. *
Atif Memon et al. , "Coverage Criteria for GUI Testing" , ACM, 2001, <http://delivery.acm.org/10.1145/510000/503244/p256-memon.pdf>, p. 1-12. *
Boris Gruschke, "Integrated Event Management: Event Correlation Using Dependency Graphs" , University of Munich, 1998, , pp. 1-12. *
Boris Gruschke, "Integrated Event Management: Event Correlation Using Dependency Graphs" , University of Munich, 1998, <http://www.nm.ifi.Imu.de/common/pub/Publikationen/grus98a/PDF-Version/grus98a.pdf>, pp. 1-12. *
Chinese Office Action mailed Feb. 13, 2012 for Chinese patent application No. 200780014114.X, a counterpart foreign application of U.S. Appl. No. 11/379,757, 8 pages.
Chinese Office Action mailed Mar. 18, 2011 for Chinese Patent Application No. 200780014114.X, a counterpart foreign application of U.S. Appl. No. 11/379,757 pp. 1-6 only.
Chinese Office Action mailed Mar. 18, 2011 for Chinese Patent Application No. 200780014114.X, a counterpart foreign application of U.S. Appl. No. 11/379,757, 13 pages, pages 1-6 only.
Chinese Office Action mailed May 23, 2012 for Chinese patent application No. 200780014114.X, a counterpart foreign application of U.S. Appl. No. 11/379,757, 6 pages, pages 1-6 only.
European Office Action mailed Jan. 31, 2012 for European patent application No. 07752491.6, a counterpart foreign application of U.S. Appl. No. 11/379,757, 5 pages.
Japanese Office Aciton mailed Nov. 2, 2012 for Japanese patent application No. 2009-506493, a counterpart foreign application of U.S. Appl. No. 11/379,757, 4 pages, pp. 1-2 only.
Japanese Office Action mailed Apr. 17, 2012 for Japanese patent application No. 2009-506493, a counterpart foreign application of U.S. Appl. No. 11/379,757, 9 pages, pages 1-5 only.
Yan Liu et al., "A Configurable Event Correlation Architecture for Adaptive J2EE Applications" , IEEE, 2007, , pp. 1-10. *
Yan Liu et al., "A Configurable Event Correlation Architecture for Adaptive J2EE Applications" , IEEE, 2007, <http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=4159658>, pp. 1-10. *
US20070250525A1 (en) 2007-10-25 application