Patent ID: 8452735

Claim:
A system of selecting a data restore point with an optimal recovery time and recovery point, the recovery point being a representation of data loss incurred from a restore of valid data, comprising: a memory module; a processor; and a functional unit local to the memory module and in communication with the processor, the functional unit having modules to implement said selecting and are executed by the processor, the modules including: a dependency generator that: (i) receives a problem search criterion for an entity with corrupted data, and (ii) determines dependencies relied on by the entity to function, an event analyzer that finds at least one event signature match for the problem search criterion, said match includes information for an event logged in a event log and being associated with the entity's dependencies, and a restore advisor that selects at least one data restore point created prior to an occurrence of a particular event in the at least one event signature match for restoring data to a storage system with the corrupted data, the particular event having caused the data to be corrupted, and generates a data restore point score for each selected data restore point based on an expected data loss and a combination of event signature match scores for all event signature matches that correspond to the selected data restore point, and wherein the event signature match scores are calculated based on a time decay factor and a match factor of the event signature match, the time decay factor quantifies how recent an event in the event signature match is related to a time window for the problem search criterion, and the match factor of a event signature match is based on relevance of the matched event and the entity's relation to another entity associated with the event logged in said event log.