Parameter suggestion based on user activity

Patent metadata

Field	Value
Publication number	US-2016259791-A1
Application number	US-201315033174-A
Country	US
Kind code	A1
Filing date	Oct 30, 2013
Priority date	Oct 30, 2013
Publication date	Sep 8, 2016
Grant date	—

Abstract

A non-transitory, computer readable storage device includes software that, while being executed by a processor, causes the processor to choose, based on user activity, a plurality of candidate parameters to be monitored from a plurality of event messages. Further, the processor executes the software to estimate a level of similarity between the chosen plurality of candidate parameters by computing a similarity score for at least two of the chosen candidate parameters. Still further, the processor executes the software to determine a plurality of parameters from the chosen candidate parameters if the similarity score for the plurality of parameters is greater than a threshold.

First claim

What is claimed is:

1 . A method, comprising:
receiving, by a processor, a plurality of event messages associated with a computer event log; based on user activity, choosing a plurality of parameters to be traced in the event messages; converting, by the processor, the chosen plurality of parameters into numeric-based metrics; estimating, by the processor, a similarity score between the chosen parameters; and if the similarity score for the chosen parameters is greater than a threshold, suggesting, by the processor, a parameter to be monitored in the event messages corresponding to the numeric-based metrics.

2 . The method of claim 1 , wherein choosing the plurality of parameters comprises:
analyzing the plurality of event messages to determine templates for the event messages; organizing the plurality of event messages into a plurality of clusters based on the determined templates; and generating a classification, based on an atom, that comprises a cluster;

3 . The method of claim 2 , wherein choosing the plurality of parameters comprises: searching for a parameter in the plurality of clusters that either (a) is synonymous to a parameter specified by a user to monitor, or (b) has a similar neighboring symbol to a neighboring symbol of the parameter specified by the user to monitor.

4 . The method of claim 2 , further comprising computing a time correlation between the determined templates and wherein generating the atom is based on the time correlation.

5 . The method of claim 1 , wherein choosing the plurality of parameters comprises: computing a time-based correlation of a parameter being monitored to the chosen plurality of parameters to be traced.

6 . A non-transitory, computer readable storage device containing software that, when executed by a processor, causes the processor to:
choose, based on user activity, a plurality of candidate parameters to be monitored from a plurality of event messages; estimate a level of similarity between the chosen plurality of candidate parameters by computing a similarity score for at least two of the chosen candidate parameters; and determine a plurality of parameters from the chosen candidate parameters if the similarity score for the plurality of parameters is greater than a threshold.

7 . The non-transitory, computer readable storage device of claim 6 wherein the software causes the processor to choose the plurality of candidate parameters to be monitored by causing the processor to:
analyze the event messages to determine templates from the event messages;
classify the event messages into a plurality of clusters based on the determined templates; and
generate, based on an atom, a classification comprising a cluster.

8 . The non-transitory, computer readable storage device of claim 7 wherein the software causes the processor to choose the plurality of candidate parameters to be monitored by causing the processor to: search for a parameter in the plurality of clusters that either (a) is synonymous to a parameter specified by a user to monitor, or (b) has a similar neighboring symbol of he parameter specified by the user to monitor.

9 . The non-transitory, computer readable storage device of claim 7 wherein the software causes the processor to choose the plurality of parameters as candidates to be monitored by causing the processor to; identify the candidate parameters from the plurality of clusters based on a user preference in a specified parameter.

10 . The non-transitory, computer readable storage device of claim 7 wherein the software causes the processor to generate the atom based on a time-based correlation between the determined templates.

11 . The non-transitory, computer readable storage device of claim 6 wherein the software causes the processor to choose the plurality of candidate parameters to be monitored by causing the processor to: estimate a correlation, based on time, of a parameter being monitored to the chosen candidate parameters of the event message.

12 . A non-transitory, computer readable storage device containing software that, when executed by a processor, causes the processor to:
receive a plurality of event messages from a server; choose a plurality of parameters in the event messages to be traced, according to user activity; convert the chosen parameters into numbers; calculate a similarity score between the chosen parameters; and if the similarity score for the chosen parameters is greater than a threshold, recommend the chosen parameter in the event messages to be monitored.

13 . The non-transitory, computer readable storage device of claim 12 wherein the software causes the processor to choose the parameters in the event messages to be traced by causing the processor to:
analyze the plurality of event messages to determine templates for the event messages;
organize the plurality of event messages into a plurality of clusters based on the determined templates:
generate an classification that comprises a cluster, based on a time-based correlation between the organized clusters; and
choose a parameter from the organized clusters that either (a) is synonymous to a user's interested parameter in the event messages, or (b) has a similar neighboring symbol to a neighboring symbol of the users interested parameter.

14 . The non-transitory, computer readable storage device of claim 13 wherein the software causes the processor to choose the parameters in the event messages to be traced by causing the processor to:
choose the parameter either (a) from the generated classification, or (b) that has a similar neighboring symbol in the generated classification.

15 . The non-transitory, computer readable storage device of claim 12 wherein the software causes the processor to choose the parameters in the event messages to be traced by causing the processor to:
estimate a time-based correlation of a parameter being monitored to the chosen parameters.

Assignees

• Hewlett Packard Entpr Dev Lp

Inventors

• Vizer Fernando
• Samuni Eran
• Sade Alon

Classifications

• G06F11/3452

  Performance evaluation by statistical analysis · CPC title

• G06F2201/81

  Threshold · CPC title

• G06F17/00

  Digital computing or data processing equipment or methods, specially adapted for specific functions (information retrieval, database structures or file system structures therefor G06F16/00) · CPC title

• G06F16/24578 Primary

  using ranking · CPC title

• G06F11/3466

  Performance evaluation by tracing or monitoring · CPC title