Visual map for network alerts

Patent metadata

Field	Value
Publication number	US-12587432-B2
Application number	US-202418666106-A
Country	US
Kind code	B2
Filing date	May 16, 2024
Priority date	May 16, 2024
Publication date	Mar 24, 2026
Grant date	Mar 24, 2026

Abstract

Example embodiments may include obtaining first data indicating a first service degradation in a network, and obtaining second data indicating a second service degradation in the network, identifying a field that is associated with the first data and the second data. Based on the field, determining a relationship between the first data and the second data and generating a representation of a user interface including the first data, the second data, and the relationship, wherein the user interface includes toggles that control display of a plurality of fields associated with the first data and the second data including the field.

First claim

What is claimed is:

1 . A method comprising:
obtaining first data indicating a first service degradation in a network, and obtaining second data indicating a second service degradation in the network; identifying a field that is associated with the first data and the second data; determining, based on the field, a relationship between the first data and the second data, wherein a portion of the network is stored in a configuration management database, wherein the relationship is a causal relationship determined based on a functional dependency, wherein the functional dependency is based on configuration data stored in the configuration management database; identifying a second field that is associated with the first data and the second data, wherein the second field comprises configuration data for the network; determining, based on the second field, a second relationship between the first data and the second data; and generating a representation of a user interface including the first data, the second data, the relationship, and the second relationship, wherein the user interface includes a control element to control display of a plurality of fields associated with the first data and the second data including the field and the second field.

2 . The method of claim 1 , wherein the first data is obtained from a first monitoring system of the network and the second data is obtained from a second monitoring system of the network, and wherein determining the field comprises obtaining a common value for the field from the first monitoring system and the second monitoring system.

3 . The method of claim 1 , wherein identifying the field comprises:
obtaining a first plurality of fields associated with the first data, wherein the first plurality of fields comprises the field; obtaining a second plurality of fields associated with the second data, wherein the second plurality of fields comprises the field; and determining the field based on a pairwise comparison of values within the first plurality of fields and the second plurality of fields.

4 . The method of claim 3 , wherein the first plurality of fields contains values representing a first node, a first metric, and a first source, wherein the plurality of fields contains values representing a second node, a second metric, and a second source, and wherein the field is one which has a shared value between the first plurality of fields and the second plurality of fields.

5 . The method of claim 1 , wherein determining the relationship comprises determining a group for the first data and the second data, wherein the group is based on historical data indicating a correlation between the first service degradation and the second service degradation.

6 . The method of claim 1 , wherein determining the relationship comprises:
providing, as input to a trained machine learning model, the first data and the second data; and receiving, as output from the trained machine learning model, the relationship, wherein the trained machine learning model is trained using a plurality of training samples, wherein each respective training sample of the plurality of training samples comprises:
one or more service degradations;
associated data indicating each service degradation; and
a corresponding relationship between the one or more service degradations.

7 . The method of claim 1 , wherein the user interface comprises a visual map, wherein the visual map includes:
a first node representing the first data; a second node representing the second data; and a link between the first node and the second node, wherein the link represents the relationship.

8 . The method of claim 7 , wherein the user interface comprises a list including the first data and the second data.

9 . The method of claim 1 , further comprising:
obtaining an input from the user interface, wherein the input represents a resolution action for the first service degradation or the second service degradation; executing the resolution action; and updating the user interface to indicate the execution of the resolution action.

10 . The method of claim 9 , wherein the resolution action comprises restarting one or more devices within of the network.

11 . A non-transitory computer-readable medium, having stored thereon program instructions that, upon execution by a computing system, cause the computing system to perform operations comprising:
obtaining first data indicating a first service degradation in a network, and obtaining second data indicating a second service degradation in the network; identifying a field that is associated with the first data and the second data; determining, based on the field, a relationship between the first data and the second data, wherein a portion of the network is stored in a configuration management database, wherein the relationship is a causal relationship determined based on a functional dependency, wherein the functional dependency is based on configuration data stored in the configuration management database; identifying a second field that is associated with the first data and the second data, wherein the second field comprises configuration data for the network; determining, based on the second field, a second relationship between the first data and the second data; and generating a representation of a user interface including the first data, the second data, the relationship, and the second relationship, wherein the user interface includes a control element to control display of a plurality of fields associated with the first data and the second data including the field and the second field.

12 . The non-transitory computer-readable medium of claim 11 , wherein the first data is obtained from a first monitoring system of the network and the second data is obtained from a second monitoring system of the network, and wherein determining the field comprises obtaining a common value for the field from the first monitoring system and the second monitoring system.

13 . The non-transitory computer-readable medium of claim 11 , wherein identifying the field comprises:
obtaining a first plurality of fields associated with the first data, wherein the first plurality of fields comprises the field; obtaining a second plurality of fields associated with the second data, wherein the second plurality of fields comprises the field; and determining the field based on a pairwise comparison of values within the first plurality of fields and the second plurality of fields.

14 . The non-transitory computer-readable medium of claim 11 , wherein determining the relationship comprises determining a group for the first data and the second data, wherein the group is based on historical data indicating a correlation between the first service degradation and the second service degradation.

15 . The non-transitory computer-readable medium of claim 11 , wherein determining the relationship comprises:
providing, as input to a trained machine learning model, the first data and the second data; and receiving, as output from the trained machine learning model, the relationship, wherein the trained machine learning model is trained using a plurality of training samples, wherein each respective training sample of the plurality of training samples comprises:
one or more service degradations;
associated data indicating each service degradation; and
a corresponding relationship between the one or more service degradations.

16 . A system comprising:
one or more processors; and memory, containing program instructions that, upon exec

Assignees

• Servicenow Inc

Inventors

• Cohen Shay
• Izikovich Lilach
• Tzur Rani
• Wigelman Maayan
• Shpatz Noy

Classifications

• H04L41/0659

  by isolating or reconfiguring faulty entities · CPC title

• H04L41/16

  using machine learning or artificial intelligence · CPC title

• H04L41/0631

  using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis · CPC title

• H04L41/065

  involving logical or physical relationship, e.g. grouping and hierarchies · CPC title

• H04L41/22

  comprising specially adapted graphical user interfaces [GUI] · CPC title