Maintenance window scheduling

Patent metadata

Field	Value
Publication number	US-10187492-B2
Application number	US-201615169645-A
Country	US
Kind code	B2
Filing date	May 31, 2016
Priority date	Jul 2, 2015
Publication date	Jan 22, 2019
Grant date	Jan 22, 2019

Abstract

A change in an information technology system may be monitored. The information technology system may include a computing resource, a computing service that is to utilize the computing resource, a resource policy including a rule that is to be matched to the computing resource. A compliance operation may be performed on the computing resource in accordance with the rule. A schedule may be changed for a maintenance window in which the compliance operation is to be performed. The change of the schedule may be based on the monitored change in the information technology system and on a priority of the compliance operation or of the computing service.

First claim

The invention claimed is:

1. A non-transitory computer-readable storage medium comprising instructions executable by a processor to:
monitor for change in an information technology system, the information technology system including a first computing resource, a second computing resource, a first computing service that is to utilize the first computing resource, a second computing service that is to utilize the second computing resource, a first resource policy including a first rule that is to be matched to the first computing resource, and a second resource policy including a second rule that is to be matched to the second computing resource,
wherein a first compliance operation is to be performed on the first computing resource in accordance with the first rule and a second compliance operation is to be performed on the second computing resource in accordance with the second rule;

access a schedule identifying a first maintenance window in which the first compliance operation is to be performed and a second maintenance window in which the second compliance operation is to be performed;
determine a first priority of the first resource policy or of the first computing service and a second priority of the second resource policy or of the second computing service, and
automatically and without user interaction, change the schedule for the first maintenance window, wherein the change of the schedule is based on the monitored change in the information technology system and on the determined first and second priorities,
wherein:
when the first priority is higher than the second priority, the change of the schedule is to cause the first compliance operation to be completed before the second compliance operation, and
when the second priority is higher than the first priority, the change of the schedule is to cause the first compliance operation to be completed after the second compliance operation.

2. The non-transitory computer-readable storage medium of claim 1 wherein
the first compliance operation comprises a scan operation to be performed on the first computing resource to determine whether the first rule is violated,
a remediation operation is to be performed on the first computing resource to remediate the violation, and
the change of the schedule is based on the priority of the first computing service or on another priority of the remediation operation.

3. The non-transitory computer-readable storage medium of claim 1 wherein available settings for the maintenance window include:
read-only, in which a scan operation but not a remediation operation is to be performed,
read/write, in which the scan operation and the remediation operation is to be performed, and
system, in which a system-wide compliance operation is to be performed.

4. The non-transitory computer-readable storage medium of claim 1 wherein the first rule is to be matched to the first computing resource based on a rule scope of the first rule and a resource type of the first computing resource.

5. The non-transitory computer-readable storage medium of claim 1 further comprising instructions executable by the processor to change a second schedule of the first compliance operation to be performed within the first maintenance window based on the monitored change in the information technology system.

6. The non-transitory computer-readable storage medium of claim 1 wherein to change the schedule for the first maintenance window comprises to change a duration of the first maintenance window.

7. The non-transitory computer-readable storage medium of claim 1 wherein to change the schedule for the first maintenance window comprises to change a frequency of the first maintenance window.

8. The non-transitory computer-readable storage medium of claim 1 wherein
to monitor the change in the information technology system comprises to collect statistics regarding completion of past compliance operations in past maintenance windows, and
the change of the schedule is based on the statistics.

9. The non-transitory computer-readable storage medium of claim 1 wherein
the first computing service includes a first service-oriented architecture unit including a first plurality of computing resources including the first computing resource, the first compliance operation being associated with the first service-oriented architecture unit, and
the first computing service includes a second service-oriented architecture unit including a second plurality of computing resources including the second computing resource, the second compliance operation being associated with the second service-oriented architecture unit.

10. The non-transitory computer-readable storage medium of claim 9 further comprising instructions executable by the processor to, in response to creation of a new computing service or a new service-oriented architecture, create a new maintenance window according to a default setting.

11. The non-transitory computer-readable storage medium of claim 1 wherein the change in the information technology system comprises a change in the first computing resource or the first computing service.

12. The non-transitory computer-readable storage medium of claim 1 wherein the change in the information technology system comprises a change in the first resource policy or a service level objective for the first computing service.

13. The non-transitory computer-readable storage medium of claim 1 wherein the change of the schedule is based on a time limit imposed on the first compliance operation.

14. The non-transitory computer-readable storage medium of claim 13 wherein the first compliance operation comprises a remediation operation, and the time limit is imposed based upon the first computing resource being noncompliant with the first rule.

15. The non-transitory computer-readable storage medium of claim 1 wherein the change of the schedule is based on a property of the first compliance operation.

16. The non-transitory computer-readable storage medium of claim 1 wherein the change of the schedule is based on a record of a pending or incomplete compliance operation.

17. The non-transitory computer-readable storage medium of claim 1 further comprising instructions executable by the processor to:
output, to an output device, a visualization representing the schedule and a property of the first maintenance window;
receive, from an input device, a manual modification of the first maintenance window; and
receive, from the input device, a manual initiation of an on-demand compliance operation outside of the first maintenance window.

18. The non-transitory computer-readable storage medium of claim 1 wherein
the information technology system includes another computing resource,
the first computing service is to utilize the other computing resource,
the first rule is a composite rule that is to be matched to the other computing resource, and
the first compliance operation is to be performed in the other computing resource in accordance with the first rule.

19. A system comprising
a processor; and
a memory comprising instructions executable by the processor to:
receive indications of monitored changes in computing resources of an information technology system, computing services that are to utilize the computing resources, and resource policies including rules that are to be matched to the respective computing resources;
change schedules for maintenance windows in which scan and remediation compliance operations are to be performed, wherein the scan and remedi

Assignees

• Hewlett Packard Entpr Dev Lp
• Entit Software Llc

Inventors

• Thomas Kishan
• Yoshikawa Michele
• Pan Dongye
• Roecks Jeffrey Russell
• Kirkendall Stephen Lee

Classifications

• H04L67/32 Primary

  Electricity · mapped topic

• H04L67/22

  Electricity · mapped topic

• H04L67/60 Primary

  Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources (admission control or resource allocation H04L47/70) · CPC title

• H04L67/535 Primary

  Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34) · CPC title