Method and system for managing a set of alerts related to an application workflow

Patent metadata

Field	Value
Publication number	US-12511211-B2
Application number	US-202318397572-A
Country	US
Kind code	B2
Filing date	Dec 27, 2023
Priority date	Nov 10, 2023
Publication date	Dec 30, 2025
Grant date	Dec 30, 2025

Abstract

A method and a system for managing a set of alerts related to an application workflow are disclosed. The method includes: detecting, by a processor via a build time architecture digitizer (BTAD), request for new infrastructure component provisioning; generating via BTAD, updated architecture model; monitoring, via runtime architecture digitizer (RAD), set of services related to new infrastructure component; generating, via RAD, final architecture model; receiving, at alert enricher module (AEM) from database, set of alerts; mapping, via AEM, alerts with corresponding components of final architecture model; assigning, via AEM, corresponding components from final architecture model to alerts; enriching, via AEM, alerts with relevant metrics and log details; generating, via AEM, set of enriched alerts; and providing, via AEM, enriched alerts to manage set of alerts.

First claim

What is claimed is:

1 . A method for managing a set of alerts related to an application workflow, the method comprising:
detecting, by at least one processor via a build time architecture digitizer, a request for a new infrastructure component provisioning in an existing architecture model related to the application workflow; generating, by the at least one processor via the build time architecture digitizer, an updated architecture model based on the existing architecture model and the request for the new infrastructure component provisioning; monitoring, by the at least one processor via a runtime architecture digitizer, a set of services related to the new infrastructure component; generating, by the at least one processor via the runtime architecture digitizer, a final architecture model based on the set of services and the updated architecture model; receiving, by the at least one processor at an alert enricher module via a communication interface from a database, the set of alerts; mapping, by the at least one processor via the alert enricher module, at least one alert from among the set of alerts with at least one corresponding component from among a set of components of the final architecture model; assigning, by the at least one processor via the alert enricher module, the at least one corresponding component in the final architecture model to the at least one alert from among the set of alerts based on the mapping; enriching, by the at least one processor via the alert enricher module, the at least one alert from among the set of alerts with at least one from among a set of relevant metrics and a set of relevant log details based on the at least one corresponding component; generating, by the at least one processor via the alert enricher module, a set of enriched alerts based on the enriching of the at least one alert from among the set of alerts; and providing automatically, by the at least one processor via the alert enricher module on a user interface, at least one enriched alert from among the set of enriched alerts to manage the set of alerts.

2 . The method as claimed in claim 1 , the method further comprises:
receiving, by the at least one processor at an alert correlator module, the at least one enriched alert from among the set of enriched alerts; comparing, by the at least one processor via the alert correlator module, the at least one enriched alert from among the set of enriched alerts with a set of open alerts based on at least one from among a set of inter-component dependencies and a set of historical co-occurrences; generating, by the at least one processor via the alert correlator module, a correlation score between the at least one enriched alert from among the set of enriched alerts and at least one open alert from among the set of open alerts based on the comparison; and providing automatically, by the at least one processor via the alert correlator module on the user interface, the correlation score to manage the set of alerts.

3 . The method as claimed in claim 2 , wherein the set of inter-component dependencies indicates a dependency relation between the set of enriched alerts and the set of open alerts, and wherein the set of historical co-occurrences indicates a historical co-occurrence relation between the set of enriched alerts and the set of open alerts.

4 . The method as claimed in claim 2 , the method further comprises:
receiving, by the at least one processor at the alert correlator module from a repository, an impact data corresponding to the set of alerts; generating, by the at least one processor via the alert correlator module, a severity score for the set of alerts based on the impact data; and providing automatically, by the at least one processor via the alert correlator module on the user interface, the severity score to manage the set of alerts.

5 . The method as claimed in claim 2 , wherein the correlation score suggests that a component that is most likely to be related to and affecting other components of the application workflow.

6 . The method as claimed in claim 2 , wherein the severity score suggests how likely is an end user to be impacted by malfunctioning of a component of the application.

7 . The method as claimed in claim 1 , wherein the new infrastructure component is an infrastructure-as-code (IaC).

8 . A computing device for managing a set of alerts related to an application workflow, the computing device comprising:
a processor; a memory; and a communication interface coupled to each of the processor and the memory, wherein the processor is configured to: detect, via a build time architecture digitizer, a request for a new infrastructure component provisioning in an existing architecture model related to the application workflow; generate, via the build time architecture digitizer, an updated architecture model based on the existing architecture model and the request for the new infrastructure component provisioning; monitor, via a runtime architecture digitizer, a set of services related to the new infrastructure component; generate, via the runtime architecture digitizer, a final architecture model based on the set of services and the updated architecture model; receive, at an alert enricher module via the communication interface from a database, the set of alerts; map, via the alert enricher module, at least one alert from among the set of alerts with at least one corresponding component from among a set of components of the final architecture model; assign, via the alert enricher module, the at least one corresponding component in the final architecture model to the at least one alert from among the set of alerts based on the mapping; enrich, via the alert enricher module, the at least one alert from among the set of alerts with at least one from among a set of relevant metrics and a set of relevant log details based on the at least one corresponding component; generate, via the alert enricher module, a set of enriched alerts based on the enriching of the at least one alert from among the set of alerts; and provide automatically, via the alert enricher module on a user interface, at least one enriched alert from among the set of enriched alerts to manage the set of alerts.

9 . The computing device as claimed in claim 8 , wherein the processor is further configured to:
receive, at an alert correlator module, the at least one enriched alert from among the set of enriched alerts; compare, via the alert correlator module, the at least one enriched alert from among the set of enriched alerts with a set of open alerts based on at least one from among a set of inter-component dependencies and a set of historical co-occurrences; generate, via the alert correlator module, a correlation score between the at least one enriched alert from among the set of enriched alerts and at least one open alert from among the set of open alerts based on the comparison; and provide automatically, via the alert correlator module on the user interface, the correlation score to manage the set of alerts.

10 . The computing device as claimed in claim 9 , wherein the set of inter-component dependencies indicates a dependency relation between the set of enriched alerts and the set of open alerts, and wherein the set of historical co-occurrences indicates a historical co-occurrence relation between the set of enriched alerts and the set of open alerts.

11 . The computing device as claimed in claim 9 , wherein the processor is further configured to:
receive, at the alert correlator module from a repository, an impact data corresponding to the set of alerts; generate, via the alert correlator module,

Assignees

• Jpmorgan Chase Bank Na

Inventors

• Kumar Santha
• Bhandari Ashish
• Balasubramanian Kumbeswaran
• Tinwala Zohra

Classifications

• G06F11/3065

  Monitoring arrangements determined by the means or processing involved in reporting the monitored data (error or fault reporting or logging G06F11/0766) · CPC title

• G06F11/008

  Reliability or availability analysis · CPC title

• G06F11/3006

  where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems (multiprogramming arrangements G06F9/46; allocation of resources G06F9/50) · CPC title

• G06F11/302 Primary

  where the computing system component is a software system · CPC title