Transformation and transmission of event messages

Patent metadata

Field	Value
Publication number	US-11627031-B2
Application number	US-201916694254-A
Country	US
Kind code	B2
Filing date	Nov 25, 2019
Priority date	Apr 18, 2017
Publication date	Apr 11, 2023
Grant date	Apr 11, 2023

Abstract

Messages indicative of events are transmitted from a computer network to a management system using an agent device. The agent device receives a web service event collector from the management system. The web service event collector includes event message transformation instructions and an endpoint definition. After the web service event collector is initialized, an event message transmitted from an event source is received using the web service event collector. The event message indicates an event associated with the computer network. Using the event message transformation instructions, the event message is transformed into a format usable by the management system. The transformed event message is then transmitted to the management system.

First claim

What is claimed is:

1. A system, comprising:
a processor; and
a memory, accessible by the processor, the memory storing instructions, that when executed by the processor, cause the processor to perform operations comprising:
receiving, from a graphical user interface of a display device, user input indicative of an identifier associated with a computing device in a managed network;
transmitting, to the computing device, configuration software based on the identifier associated with the computing device, wherein the computing device is configured to transform one or more event messages received from an event source from a first format to a second format after receiving the configuration software, wherein the event source and the computing device are external to the system, and wherein the system is restricted from receiving the one or more event messages from the event source;
receiving, from the computing device, the one or more event messages in the second format; and
generating an alert based on the one or more event messages.

2. The system of claim 1 , wherein the operations comprise:
receiving, from the graphical user interface of the display device, user input indicative of an endpoint associated with the computing device;
wherein the computing device is configured to initialize the endpoint associated with the computing device to receive the one or more event messages from the event source after receiving the configuration software.

3. The system of claim 2 , wherein the endpoint utilizes a port associated with the computing device to receive the one or more event messages.

4. The system of claim 1 , wherein the operations comprise storing the one or more event messages in a table of a database after receiving the one or more event messages from the computing device.

5. The system of claim 1 , wherein the first format is incompatible with the system.

6. The system of claim 1 , wherein the first format comprises a markup language format and the second format comprises an object format.

7. The system of claim 6 , wherein the markup language format comprises an eXtensible Markup Language format and the object format comprises a JavaScript Object Notation format.

8. A method, comprising:
receiving, by a management system from a graphical user interface of a display device, a first user input indicative of an identifier associated with a computing device in a managed network and a second user input indicative of an endpoint associated with the computing device;
transmitting, by the management system to the computing device, configuration software based on the identifier associated with the computing device, wherein the computing device is automatically configured to initialize the endpoint associated with the computing device to receive one or more event messages from an event source and transform the one or more event messages received from the event source from a first format to a second format after receiving the configuration software, wherein the event source and the computing device are external to the management system;
receiving, by the management system from the computing device, the one or more event messages in the second format; and
generating, by the management system, an alert based on the one or more event messages.

9. The method of claim 8 , wherein the management system is restricted from receiving the one or more event messages from the event source.

10. The method of claim 8 , comprising transmitting, by the management system to the computing device, an update to the configuration software, wherein the computing device is automatically configured to transform one or more additional event messages received from the event source from the first format to a third format after receiving the configuration software.

11. The method of claim 10 , comprising receiving, by the management system from the computing device, the one or more additional event messages in the third format.

12. The method of claim 8 , comprising determining, by the management system, that a new event source is present in the managed network.

13. The method of claim 12 , comprising transmitting, by the management system to the computing device, an update to the configuration software, wherein the computing device is automatically configured to transform one or more additional event messages received from the new event source from a third format to the second format.

14. The method of claim 8 , wherein the one or more event messages are encrypted before the management system receives the one or more event messages.

15. A non-transitory, computer-readable medium, comprising instructions that when executed by one or more processors, cause the one or more processors to perform operations comprising:
receiving, from a graphical user interface of a display device, user input indicative of an identifier associated with a computing device in a managed network and an endpoint associated with the computing device;
transmitting, to the computing device, configuration software based on the identifier associated with the computing device, wherein the computing device is configured to initialize the endpoint associated with the computing device to receive one or more event messages from an event source and transform the one or more event messages received from the event source from a first format to a second format after receiving the configuration software, wherein the event source and the computing device are external to a system that includes the one or more processors, and wherein the one or more processors are restricted from receiving the one or more event messages from the event source;
receiving, from the computing device, the one or more event messages in the second format; and
storing the one or more event messages in a table of a database.

16. The non-transitory, computer-readable medium of claim 15 , wherein the operations comprise generating an alert based on the one or more event messages.

17. The non-transitory, computer-readable medium of claim 15 , wherein the endpoint utilizes a port associated with the computing device to receive the one or more event messages.

18. The non-transitory, computer-readable medium of claim 15 , wherein the first format comprises a markup language format and the second format comprises an object format.

19. The non-transitory, computer-readable medium of claim 15 , wherein the one or more processors are unable to process the one or more event messages in the first format.

Assignees

• Servicenow Inc

Inventors

• Makovsky Bnayahu
• Margalit Adar

Classifications

• H04L67/51

  Discovery or management thereof, e.g. service location protocol [SLP] or web services · CPC title

• H04L41/0663

  Performing the actions predefined by failover planning, e.g. switching to standby network elements · CPC title

• H04L41/046 Primary

  comprising network management agents or mobile agents therefor · CPC title

• H04L41/22

  comprising specially adapted graphical user interfaces [GUI] · CPC title

• H04L41/06

  Management of faults, events, alarms or notifications · CPC title