Agent technology system with monitoring policy

Patent metadata

Field	Value
Publication number	US-10979304-B2
Application number	US-201715810297-A
Country	US
Kind code	B2
Filing date	Nov 13, 2017
Priority date	Jan 27, 2015
Publication date	Apr 13, 2021
Grant date	Apr 13, 2021

Abstract

A system is provided for clustering events. A first engine is configured to receive message data from a managed infrastructure that includes managed infrastructure physical hardware that supports the flow and processing of information, The at least one engine is configured to determine common characteristics of events and produce clusters of events relating to the failure of errors in the managed infrastructure. Membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in a physical hardware of the managed infrastructure directed to supporting the flow and processing of information. The first engine is configured to create one or more situations that is a collection of one or more events or alerts representative of the actionable problem in the managed infrastructure. A second engine is configured to determine one or more common steps from events and produces clusters relating to events. The second engine determines one or more common characteristics of events and producing clusters of events relating to the failure or errors in the managed infrastructure. A statistical analytical engine is included.

First claim

What is claimed is:

1. A system for clustering one or more events, comprising: a processor, a memory and in input/output controller, the processor configured to provide
operation of a first engine, a second engine and an operating system:
the first engine that can be an extraction engine which receives message data from managed infrastructure which includes managed infrastructure physical hardware that supports the flow and processing of information,
the first engine creating one or more situations that is a collection of the one or more events representative of the actionable problem in the managed infrastructure;
the second engine coupled to the first engine determining one or more common steps from the one or more events and produces clusters relating to the one or events,
the operating system being separate from the first engine but coupled to the first engine, the operating system operating to provide at least one of: a textual, and numeric values that when they are similar relative to one or more
analyzed monitoring events, and it is determined that a collection of the one or more events share an attribute, one or more output of clusters is created;
wherein in response to the output of clusters, one or more physical changes are made to the managed infrastructure physical hardware: wherein the textual and numeric values indicate a state of a hardware component of the managed infrastructure wherein the system optimizes the plurality of events and alerts for greater accuracy; and wherein the second engine uses a source address for each of an event of the plurality of events;
a display computer system coupled to the first engine, the display computer system including a display system usable by one or more people; and
the first engine receiving user inputs from the display computer system with the inputs acted on by the first engine with instructions from the operating system.

2. The system of claim 1 , wherein anomalies are detected prior to generating an event.

3. The system of claim 1 , further comprising:
a managed server coupled to the display computer system.

4. The system of claim 3 , further comprising:
an ATOps server.

5. The system of claim 1 , further comprising:
a cloud system in communication with the display computer system.

6. The system of claim 1 , further comprising: a platform coupled to the first engine.

7. The system of claim 6 , wherein the platform is coupled to the display computer system.

8. The system of claim 1 , wherein the first engine executes a collection of agent technology system tasks.

9. The system of claim 8 , wherein the collection of agent technology system tasks is configurable.

10. The system of claim 8 , wherein the collection of agent technology system tasks probe hardware of a managed infrastructure.

11. The system of claim 8 , wherein the collection of agent technology system tasks probe hardware of a managed infrastructure.

12. The system of claim 11 , wherein the system is used by a user to probe hardware of a managed infrastructure that are used to compare against the templates to identify a managed infrastructure hardware element.

13. The system of claim 1 , wherein the engine is configured to poll for data.

14. The system of claim 1 , wherein the system is configured to receive data relative to a managed infrastructure.

15. The system of claim 1 , further comprising:
a plurality of data centers.

Assignees

• Moogsoft Inc

Inventors

• Tee Philip
• Broad Stuart
• Whitehead Richard

Classifications

• H04L41/12

  Discovery or management of network topologies · CPC title

• H04L41/0894

  Policy-based network configuration management · CPC title

• H04L67/75

  Indicating network or usage conditions on the user display · CPC title

• H04L63/1408

  by monitoring network traffic (monitoring network traffic per se H04L43/00) · CPC title

• H04L41/0604

  using filtering, e.g. reduction of information by using priority, element types, position or time · CPC title