Alarms with stack trace spanning logical and physical architecture

Patent metadata

Field	Value
Publication number	US-10037232-B1
Application number	US-201715420538-A
Country	US
Kind code	B1
Filing date	Jan 31, 2017
Priority date	Jan 31, 2017
Publication date	Jul 31, 2018
Grant date	Jul 31, 2018

Abstract

Provided is a process including: receiving, with an infrastructure monitoring application, metrics and events from a plurality of infrastructure agents executing on a plurality of computing devices; receiving an event record from a given computing device among a plurality of computing devices executing the distributed application; accessing a plurality of parameters of a computing device associated with the device identifier; determining one or more network-architecture topology host identifiers based on the plurality of parameters; and storing in memory a correlation between the event record and the one or more network-architecture topology host identifiers.

First claim

What is claimed is:

1. A tangible, non-transitory, machine readable medium storing instructions that when executed by one or more computers effectuate operations comprising:
receiving, with an infrastructure monitoring application, metrics and events from a plurality of infrastructure agents executing on a plurality of computing devices, wherein:
the plurality of computing devices have infrastructure agents configured to monitor first events and metrics of hosts executed by the plurality of computing devices,
at least some of the plurality of computing devices have a plurality of hosts, and
the infrastructure monitoring application is configured to aggregate the first events and metrics from the infrastructure agents and organize the first events and metrics according to a network-architecture topology of the plurality of computing devices;

receiving an event record from a given computing device among a plurality of computing devices executing the distributed application, wherein:
the event record is received from a given infrastructure agent, and
the event record includes a device identifier of one of the plurality of computing devices but not a host identifier in the network-architecture topology;

accessing a plurality of parameters of a computing device associated with the device identifier;
determining one or more network-architecture topology host identifiers based on the plurality of parameters;
storing in memory a correlation between the event record and the one or more network-architecture topology host identifiers; and
accessing, with one or more processors, the stored correlation to troubleshoot an issue affecting performance of the distributed application and thereby improve performance of the distributed application.

2. The medium of claim 1 , comprising:
receiving, with an application performance monitoring application, events and metrics from a plurality of application agents executing on the plurality of computing devices, wherein:
the application agents are configured to monitor application components of a distributed application executing on the plurality of computing devices, and
the application performance monitoring application is configured to aggregate second events and metrics from the application agents and organize the second the events and metrics according to a logical-architecture topology of the distributed application;

determining one or more logical-architecture topology host identifiers corresponding to the one or more network-architecture topology host identifiers; and
storing in memory a correlation between the event record and the one or more logical-architecture topology host identifiers.

3. The medium of claim 2 , wherein:
the logical-architecture topology and the network architecture topology have different namespaces for host identifiers such that at least some hosts have a different identifier in the different namespaces; and
determining one or more logical-architecture topology host identifiers comprises:
determining one or more logical-architecture topology host identifiers mapped to the one or more network-architecture topology host identifiers in a cross-namespace mapping.

4. The medium of claim 2 , wherein the operations comprise:
instructing a computing device to display a graphical user interface visually correlating the event record with metrics or attributes corresponding to both the one or more network-architecture topology host identifiers and the one or more logical-architecture topology host identifiers.

5. The medium of claim 2 , wherein the operations comprise:
instructing a computing device to display a graphical user interface visually correlating the event record with at least some of the second events or metrics received from a plurality of application agents monitoring a plurality of application components executing on a plurality of hosts identified by the one or more logical-architecture topology host identifiers.

6. The medium of claim 2 , wherein the operations comprise:
instructing a computing device to present the event record in visual association with an icon representing at least one of the one or more logical-architecture topology host identifiers in a graphical representation of the logical-architecture topology.

7. The medium of claim 6 , wherein the logical-architecture topology is based on a call graph of the distributed application, the call graph spanning more than one of the computing devices.

8. The medium of claim 2 , wherein the operations comprise:
correlating the event record to a transaction trace indicating response times of a plurality of routines among a plurality of application components of the distributed application.

9. The medium of claim 2 , wherein the operations comprise:
instructing a computing device to display a graphical user interface correlating:
the event record;
alarms, at least some of the first events or metrics, or attributes received from infrastructure agents monitoring hosts identified by the one or more network-architecture topology host identifiers; and
alarms, at least some of the second events or metrics, or attributes received from application agents monitoring application components executed by hosts identified by the one or more network-architecture topology host identifiers.

10. The medium of claim 2 , wherein the operations comprise:
measuring a response times of a routines of application components;
instructing a computing device to display a dashboard or report indicating relative contributions of the routines to a total response time of a transaction serviced by the distributed application; and
associating, with the dashboard or report, one of the routines with the event report.

11. The medium of claim 1 , wherein the operations comprise:
instructing a computing device to display a graphical user interface visually correlating the event record with at least some of the first events or metrics received from a plurality of infrastructure agents monitoring a plurality of hosts identified by the one or more network-architecture topology host identifiers.

12. The medium of claim 1 , wherein the parameters comprise at least two of the following:
a primary domain name service;
a domain name service entry;
an Internet Protocol address; or
a medium access control address.

13. The medium of claim 1 , wherein determining the one or more network-architecture topology host identifiers based on the plurality of parameters comprises:
matching a primary domain name service associated with the device identifier to a primary domain name service associated with a given one of the one or more network-architecture topology host identifiers;
matching a domain name service entry associated with the device identifier to a domain name service entry associated with the given one of the one or more network-architecture topology host identifiers;
matching an Internet Protocol address associated with the device identifier to an Internet Protocol address associated with the given one of the one or more network-architecture topology host identifiers; and
matching a medium access control address associated with the device identifier to a medium access control address associated with the given one of the one or more network-architecture topology host identifiers.

14. The medium of claim 1 , wherein:
the event record is correlated with an application component of the distributed application executing in a virtual machine;
the virtual machine is executed on the same computing device as the infrastructure agent from which the event record is received; and
the infrastructure agent from w

Assignees

• Ca Inc

Inventors

• Garcia Julio Cesar
• Perkins James
• Costilow Mark

Classifications

• G06F2201/815

  Virtual · CPC title

• G06F11/3452

  Performance evaluation by statistical analysis · CPC title

• G06F11/0709

  in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems · CPC title

• G06F11/3476 Primary

  Data logging (G06F11/14, G06F11/2205 take precedence) · CPC title

• G06F11/3006

  where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems (multiprogramming arrangements G06F9/46; allocation of resources G06F9/50) · CPC title