Alarms with stack trace spanning logical and physical architecture

Patent metadata

Field	Value
Publication number	US-10430257-B2
Application number	US-201815917306-A
Country	US
Kind code	B2
Filing date	Mar 9, 2018
Priority date	Jan 31, 2017
Publication date	Oct 1, 2019
Grant date	Oct 1, 2019

Abstract

Provided is a process including: receiving, with an infrastructure monitoring application, metrics and events from a plurality of infrastructure agents executing on a plurality of computing devices; receiving an event record from a given computing device among a plurality of computing devices executing the distributed application; accessing a plurality of parameters of a computing device associated with the device identifier; determining one or more network-architecture topology host identifiers based on the plurality of parameters; and storing in memory a correlation between the event record and the one or more network-architecture topology host identifiers.

First claim

What is claimed is:

1. A method, comprising:
receiving, with one or more processors, an alarm indicative of performance of a distributed application, wherein:
the alarm is received with a first identifier that identifies a first computational entity among a plurality of computational entities on which the distributed application executes, and

the first identifier is in a first namespace of an application generating the alarm;
determining, with the one or more processors, based on the first identifier and a crossnamespace mapping, a second identifier in a second namespace that is different from the first namespace, wherein:
the cross-namespace mapping is obtained by determining that an attribute of the first computational entity corresponds to an attribute of a computational-entity referent of the second identifier; and
forming and outputting, with the one or more processors, an enriched alarm that associates the received alarm with the second identifier to direct resources toward mitigating an underlying condition causing the alarm indicative of performance of the distributed application.

2. The method of claim 1 , wherein:
the alarm is obtained by a first monitoring application, the first monitoring application identifying at least some of the plurality of computational entities with names in the first namespace;
the second namespace is used by a second monitoring application to identify at least some of the plurality of computational entities with names in the second namespace;
the first monitoring application is different from the second monitoring application; and
the first monitoring application and the second monitoring application gather data indicative of performance of the distributed application.

3. The method of claim 2 , wherein:
forming the enriched alarm comprises associating the alarm with a metric measured by the second monitoring application.

4. The method of claim 2 , wherein selecting the subset comprises selecting the plurality of identifiers in the second namespace including the second identifier.

5. The method of claim 2 , wherein:
forming the enriched alarm comprises forming a stack trace that both:
identifies an application component of the distributed application, the application component exhibiting behavior triggering the alarm; and
identifies a host upon which the application component executes.

6. The method of claim 2 , wherein:
forming the enriched alarm comprises forming a stack trace that spans logical and physical architectures.

7. The method of claim 2 , wherein:
the first monitoring application includes an application performance monitoring application; and
the second monitoring application includes an infrastructure performance monitoring application.

8. The method of claim 1 , wherein:
the alarm is based on data gathered by a monitoring agent that does not have access to a record associating the first identifier with the second identifier; and
the monitoring agent executes on a computational entity identified by the second identifier.

9. The method of claim 1 , wherein:
forming the enriched alarm comprises forming instructions that at least partially define a user interface including a user-selectable input by which the user interface is caused to transition between views of data gathered by different monitoring applications and pertaining to the alarm.

10. The method of claim 1 , wherein:
the cross-namespace mapping is formed before receiving the alarm.

11. The method of claim 1 , comprising forming the cross-namespace mapping by executing steps for inferring host identifiers corresponding to received device identifiers.

12. The method of claim 1 , comprising forming the cross-namespace mapping with operations comprising:
accessing a first plurality of attributes of the first computational entity in a record corresponding to the first identifier, the plurality of attributes including at least three of the following: a domain name service, a domain name service entry, an Internet Protocol address, or a medium access control address; and
selecting a subset of a plurality of identifiers in the second namespace based on determinations that selected identifiers in the subset refer to computational entities having at least a second plurality of the first plurality of attributes.

13. The method of claim 12 , wherein selecting the subset comprises selecting a plurality of identifiers in the second namespace including the second identifier.

14. The method of claim 1 , wherein the mapping is a probabilistic mapping.

15. The method of claim 1 , wherein the mapping is a plurality-to-one mapping.

16. The method of claim 1 , wherein:
the alarm is responsive to a run-time of a routine exceeding a threshold, the routine being one of a plurality of routines executed in a pipeline by which a given transaction for a given user is serviced by a plurality of computing devices; and
the method comprises:
accessing a metric indicative of central processing unit (CPU) usage received in association with the second identifier but not the first identifier; and
causing the metric indicative of CPU usage to be presented in graphical user interface that visually associates the metric with the alarm.

17. The method of claim 1 , comprising:
monitoring performance of infrastructure upon which the distributed application executes;
monitoring performance of the distributed application; and
providing services to user computing devices with the distributed application.

18. A system, comprising:
one or more processors; and
memory storing instructions that when executed by at least some of the processors instantiate components of a monitoring application, the components comprising:
an infrastructure monitoring module configured to monitor computing infrastructure upon which a plurality of applications execute on a plurality of computing devices;
an application monitoring module configured to monitor performance of the applications;
a cross-namespace host-mapping module configured to match host names in a namespace of the infrastructure monitoring module with host names in different a namespace of the application monitoring module; and
a user-interface module configured to form instructions at least partially defining user interfaces by which alarms or other events from the monitoring application are visually associated with events or metrics from the infrastructure monitoring module to diagnose performance issues of at least some of the applications.

19. The system of claim 18 , wherein:
the infrastructure monitoring module is a multi-tenant infrastructure monitoring module;
the application monitoring module is a multi-tenant application monitoring module;
visually associating the events or metrics comprises providing a user interface comprising a user input configured to cause the user interface to navigate from an alarm obtained by the application monitoring module to metrics gathered from computing hardware by an agent configured to communicate with the infrastructure monitoring module.

20. The system of claim 18 , wherein:
the user-interface module is configured to form a stack trace that spans a logical and a physical architecture giving rise to a given alarm reported by the infrastructure monitoring module or the application monitoring module.

Assignees

• Ca Inc

Inventors

• Garcia Julio Cesar
• Perkins James
• Costilow Mark

Classifications

• G06F11/3006

  where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems (multiprogramming arrangements G06F9/46; allocation of resources G06F9/50) · CPC title

• G06F11/3476 Primary

  Data logging (G06F11/14, G06F11/2205 take precedence) · CPC title

• G06F9/544

  Buffers; Shared memory; Pipes · CPC title

• G06F11/0709

  in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems · CPC title

• G06F11/3452

  Performance evaluation by statistical analysis · CPC title