Automated electronic computing and communication system event analysis and management

Patent metadata

Field	Value
Publication number	US-10972334-B2
Application number	US-201916680193-A
Country	US
Kind code	B2
Filing date	Nov 11, 2019
Priority date	Aug 12, 2015
Publication date	Apr 6, 2021
Grant date	Apr 6, 2021

Abstract

Systems, apparatuses, and methods for automatic automated electronic computing and communication system event analysis and management are disclosed. Automatic automated electronic computing and communication system event analysis and management may include identifying an event, generating a computer readable representation of the electronic computing and communication system using automated topology enumeration, identifying an element of the electronic computing and communication system based on the representation, identifying a metric for the element, automatically investigating to determine a value for the metric, generating a remediation priority for the element based on a metric weight associated with the metric and a network layer value associated with a network layer associated with a network layer role associated with the element, and generating a graphical representation of the electronic computing and communication system indicating the remediation priority.

First claim

What is claimed is:

1. A method comprising:
receiving, via one or more processors, an indication of an event in a computing system, wherein the computing system comprises a plurality of elements;
identifying, via the one or more processors, an element of the plurality of elements corresponding to the event;
determining, via the one or more processors, a value for a metric for the element; and
in response to determining that the value is outside a range associated with the metric, generating, via the one or more processors, a remediation priority for the element based at least in part on a metric weight associated with the metric.

2. The method of claim 1 , comprising remediating, via the one or more processors, the event based at least in part on the remediation priority.

3. The method of claim 1 , wherein the event comprises a network layer event or a host layer event.

4. The method of claim 1 , wherein the plurality of elements comprise a personal computer, a router, a switch, a server, or a combination thereof.

5. The method of claim 1 , wherein the event corresponds to a failed or affected service of the computing system.

6. The method of claim 5 , wherein the failed or affected service comprises a data storage service, data manipulation service, presentation service, a communication service, e-mail service, printing service, network file system, directory services, file sharing service, instant messaging service, video telephony service, world wide web service, time service.

7. The method of claim 1 , comprising analyzing the event, wherein analyzing the event comprises examining configuration changes in one or more of the plurality of elements.

8. The method of claim 1 , wherein the metric comprises an availability of the element, a performance of the element, a capacity usage of the element, or a combination thereof.

9. The method of claim 1 , comprising generating a computer-readable representation of the computing system using automated topology enumeration, wherein the computer-readable representation represents the plurality of elements of the computing system organized in a hierarchical plurality of network layers.

10. A non-transitory, computer-readable, and tangible medium storing instructions thereon configured to cause one or more processors to:
receive an indication of an event in an electronic computing system, wherein the electronic computing system comprises a plurality of elements;
identify an element of the plurality of elements corresponding to the event;
determine a value for a metric for the element; and
in response to determining that the value is outside a range associated with the metric, generate a remediation priority for the element based at least in part on a metric weight associated with the metric.

11. The non-transitory, computer-readable, and tangible medium of claim 10 , wherein the instructions are configured to cause the one or more processors to:
generate a list of elements of the plurality of elements that are potentially affected by the event; and
collect one or more values for one or more metrics for each element of the list of elements, wherein identifying the element comprises determining that the value of the element of the list of elements is outside the range associated with the metric of the one or more metrics.

12. The non-transitory, computer-readable, and tangible medium of claim 11 , wherein the instructions are configured to cause the one or more processors to remediate the element based at least in part on the remediation priority.

13. The non-transitory, computer-readable, and tangible medium of claim 10 , wherein the instructions are configured to cause the one or more processors to identify the element of the plurality of elements corresponding to the event by enumerating a topology of the electronic computing system, wherein the topology comprises at least a portion of the plurality of elements.

14. The non-transitory, computer-readable, and tangible medium of claim 13 , wherein the portion of the plurality of elements comprises elements potentially affected by or affecting the event.

15. The non-transitory, computer-readable, and tangible medium of claim 10 , wherein the metric comprises a metric category, wherein the metric category comprises an availability category, a performance category, a capacity category, or a variance category, and wherein the metric weight is based at least in part on the metric category.

16. A computing system comprising:
a plurality of elements configured to facilitate communication throughout the computing system; and
one or more processors configured to:
receive an indication of an event within the computing system;
identify an element of the plurality of elements corresponding to the event;
determine a value for a metric for the element; and
in response to determining that the value is outside a range associated with the metric, generate a remediation priority for the element based at least in part on a metric weight associated with the metric.

17. The computing system of claim 16 , wherein the one or more processors are configured to identify the element of the plurality of elements corresponding to the event by enumerating a topology of the computing system, wherein the topology comprises at least a portion of the plurality of elements.

18. The computing system of claim 17 , wherein the portion of the plurality of elements comprises elements potentially affected by the event.

19. The computing system of claim 17 , wherein the element is identified from the enumerated topology of the computing system.

20. The computing system of claim 16 , where wherein the one or more processors are configured to identify the element of the plurality of elements corresponding to the event by identifying one or more services affected by the event.

Assignees

• Servicenow Inc

Inventors

• Delinocci John

Classifications

• H04L41/12

  Discovery or management of network topologies · CPC title

• G06F21/52

  during program execution, e.g. stack integrity {; Preventing unwanted data erasure; Buffer overflow} · CPC title

• H04L41/22

  comprising specially adapted graphical user interfaces [GUI] · CPC title

• G06F21/577

  Assessing vulnerabilities and evaluating computer system security · CPC title

• H04L41/065 Primary

  involving logical or physical relationship, e.g. grouping and hierarchies · CPC title