Determining a risk level for server health check processing

Patent metadata

Field	Value
Publication number	US-2016205127-A1
Application number	US-201514592938-A
Country	US
Kind code	A1
Filing date	Jan 9, 2015
Priority date	Jan 9, 2015
Publication date	Jul 14, 2016
Grant date	—

Abstract

Approaches are provided for determining a risk level for server health check processing. An approach includes creating statistical process control analyses for each of one or more servers on a network by calculating performance parameters for each of one or more servers based on historical values for one or more key process indicators of server health or vulnerability. The approach further includes collecting new values for each of the one or more key process indicators, detecting significant changes of the mean or variation in each of the one or more key process indicators, and determining a risk level for each of the one or more servers based on a number of the significant changes of the mean or variation. The approach further includes providing a health check recommendation for each of the one or more servers based on the risk level determined for each of the one or more servers.

First claim

1 . A method implemented in a computer infrastructure having computer executable code tangibly embodied on a computer readable storage medium having programming instructions configured to:
collect data regarding one or more servers on a network, wherein the data includes historical values for one or more key process indicators for each of the one or more servers; create statistical process control analyses for each of the one or more key process indicators on each of the one or more servers by defining performance parameters for each of the one or more key process indicators, wherein the performance parameters are calculated based on the data collected; collect new values for each of the one or more key process indicators for each of the one or more servers; detect significant changes of mean or variation in each of the one or more key process indicators based on the collected new values and the defined performance parameters; determine, by a processor, a risk level for each of the one or more servers based on a number of the significant changes of the mean or variation detected in each of the one or more key process indicators; and provide a health check recommendation for each of the one or more servers based on the risk level determined for each of the one or more servers, wherein the programming instructions are further configured to receive feedback regarding a health check performed in accordance with the health check recommendation for each of the one or more servers, and when the health check determines that there is not an issue with the one or more of the servers, the performance parameters are updated.

2 . The method of claim 1 , wherein:
the key process indicators are statistically in control; and the performance parameters are defined as a mean of the historical values for each the one or more key process indicators and a range of reasonable variation around the mean.

3 . The method of claim 2 , wherein the range of reasonable variation around the mean is bounded by control limits comprising an upper control limit (UCL) that indicates a maximum value that is statistically reasonable and a lower control limit (LCL) that indicates a minimum value that is statistically reasonable.

4 . The method of claim 3 , wherein the UCL and the LCL are calculated from equations based on distribution-independent approximations of “n” standard deviation from the mean or average of the values.

5 . The method of claim 4 , wherein the number “n” is one, two, or three.

6 . The method of claim 4 , wherein the creating the statistical process control for each of the one or more servers comprises creating one or more control charts for each of the one or more key process indicators.

7 . The method of claim 6 , wherein the detecting the significant changes of the mean or variation comprises plotting the new values for each of the one or more key process indicators within the one or more control charts, and analyzing the plotted new values in view of the performance parameters to detect the significant changes of the mean or variation in each of the key process indicators.

8 . The method of claim 7 , wherein the significant changes of the mean or variation are defined as eight or more data points in a row above or below the mean, non-random behavior, one or more data points outside the LCL or the UCL, and six or more data points strictly increasing or decreasing without deference to the mean, the LCL, or the UCL.

9 . The method of claim 1 , wherein the key process indicators comprise a number of user identification changes within a predefined time period, a number of pass word resets within a predefined time period, data transfer rates within a predefined time period, and a number of system changes within a predefined time period.

10 . (canceled)

11 . The method of claim 1 , wherein the updating the performance parameters comprises redefining the performance parameters using at least the collected new values that indicated the significant changes of the mean or variation.

12 . The method of claim 1 , wherein an information technology service management team at least one of creates, maintains, deploys and supports the computer infrastructure.

13 . A computer program product for performing an event-driven server health check, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, and the program instructions are readable by a computing device to cause the computing device to perform a method comprising:
creating statistical process control analyses for each of one or more servers on a network by calculating performance parameters for each of one or more servers based on historical values for one or more key process indicators of server health or vulnerability; collecting new values for each of the one or more key process indicators for each of the one or more servers; detecting significant changes of mean or variation in each of the one or more key process indicators based on the collected new values and the calculated performance parameters; determining, by the computing device, a risk level for each of the one or more servers based on a number of the significant changes of the mean or variation detected in each of the one or more key process indicators; and providing a health check recommendation for each of the one or more servers based on the risk level determined for each of the one or more servers, wherein the programming instructions are further configured to receive feedback regarding a health check performed in accordance with the health check recommendation for each of the one or more servers, and when the health check determines that there is not an issue with the one or more of the servers, the performance parameters are updated.

14 . The computer program product of claim 13 , wherein the key process indicators comprise a number of user identification changes within a predefined time period, a number of pass word resets within a predefined time period, data transfer rates within a predefined time period, and a number of system changes within a predefined time period.

15 . (canceled)

16 . The computer program product of claim 13 , wherein the updating the performance parameters comprises recalculating the performance parameters using at least the collected new values that indicated the significant changes of the mean or variation.

17 . A system comprising:
a CPU, a computer readable memory and a computer readable storage memory; program instructions to create statistical process control for each of one or more servers on a network by calculating performance parameters for each of one or more servers based on historical values for one or more key process indicators of server health or vulnerability; program instructions to collect new values for each of the one or more key process indicators for each of the one or more servers; program instructions to detect significant changes of mean or variation in each of the one or more key process indicators based on the collected new values and the calculated performance parameters; program instructions to determine, by the CPU, a risk level for each of the one or more servers based on a number of the significant changes of the mean or variation detected in each of the one or more key process indicators; and program instructions to provide a health check recommendation for each of the one or more servers based on the risk level determined for each of the one or more se

Assignees

• IBM

Inventors

• Roehl Michael H
• Smallowitz Howard N
• Stark George E

Classifications

• H04L43/0817

  by checking functioning · CPC title

• H04L43/10 Primary

  Active monitoring, e.g. heartbeat, ping or trace-route · CPC title

• H04L63/1433 Primary

  Vulnerability analysis · CPC title