Network event automatic remediation service

Patent metadata

Field	Value
Publication number	US-2020228430-A1
Application number	US-201916685680-A
Country	US
Kind code	A1
Filing date	Nov 15, 2019
Priority date	Jul 15, 2015
Publication date	Jul 16, 2020
Grant date	—

Abstract

A network event remediation service receives event logs from network computing devices to identify issues associated with these network computing devices. Based on these issues, the service generates various tasks to address the identified issues. The service obtains historical task data in order to determine whether any tasks do not comport with historical tasks performed by the network computing devices and removing such tasks. The service obtains health data from the network computing devices to calculate device scores for each device. The service uses the device scores to prioritize the tasks for each network computing device. These tasks are then dispatched to the network computing devices.

First claim

1 - 20 . (canceled)

21 . A method, comprising:
receiving an event log from a first network switch indicating an issue with the network switch, wherein the first network switch is in a network; transmitting requests for health data to other network switches within a part of the network wherein the first network switch is located; receiving the health data from the other network switches; calculating a score for the first network switch using the health data of the other network switches; and based on the score of the first network switch, prioritizing tasks to be performed in the network.

22 . The method of claim 21 , further including receiving historical task data for the first network switch and determining if the event log is abnormal relative to the historical task data and ignoring the event log if it is abnormal.

23 . The method of claim 21 , further including receiving task data related to a frequency of tasks being performed by the other network switches and determining that the event log is abnormal if the frequency of the tasks is greater than previously observed.

24 . The method of claim 21 , further including receiving information related to manufacturers of the other network switches and the first network switch and using the received information related to the manufactures in the calculation of the score.

25 . The method of claim 21 , wherein the part of the network is a data center, and wherein the health data from the other network switches is used to determine a capacity of the network in the data center and using the capacity of the network in calculating the score.

26 . The method of claim 21 , wherein the health data from the other network switches is used to determine a number of network switches currently online in the part of the network wherein the first network switch is located and using the number of network switches in calculating the score.

27 . One or more computer-readable media comprising computer-executable instructions that, when executed, cause a computing system to perform a method comprising:
receiving event logs obtained from multiple network devices in a network, wherein the multiple network devices include a first network device and other network devices in the network; generating tasks performable to remediate the one or more event logs; receiving health data for the other network devices; and prioritizing the tasks to the first network device based on the health data for the other network devices.

28 . The one or more computer-readable media of claim 27 , wherein the method further comprises:
receiving historical task data for the first network device and determining if the event logs associated with the first network device are abnormal relative to the historical task data and ignoring the event logs associated with the first network device if it is abnormal.

29 . The one or more computer-readable media of claim 27 , wherein the multiple network devices are within a same part of the network as the first network device.

30 . The one or more computer-readable media of claim 27 , wherein the health data for the other network devices is used to determine capacity of the network in a part of the network that the first network device is located.

31 . The one or more computer-readable media of claim 30 , wherein the part of the network that the first network device is located is a data center.

32 . The one or more computer-readable media of claim 27 , wherein the health data for the other network devices is used to determine a number of downed connections within a data center that the first network device is located.

33 . The one or more computer-readable media of claim 27 , wherein the first network device and the other network devices are routers.

34 . The one or more computer-readable media of claim 27 , wherein the method further comprises:
calculating a score for the first network device using the health data of the other network devices and using the score in the prioritizing of the tasks.

35 . The one or more computer-readable media of claim 34 , wherein the method further comprises:
receiving information related to manufacturers of the other network devices and the first network device and using the received information related to the manufactures in the calculation of the score.

36 . A system comprising at least one computing device configured to implement one or more services, wherein the one or more services are configured to perform a method comprising:
identifying, based on one or more event logs obtained from a network computing device, one or more functional issues associated with the network computing device, wherein the network computing device is in a data center; generating one or more tasks performable to address the identified one or more functional issues associated with the network computing device; receiving health data for other network devices in the data center; prioritizing the one or more tasks to the first network device based on the health data for the other network devices; and transmitting the one or more tasks to the network computing device.

37 . The system of claim 36 , wherein the one or more services are further configured to perform the method, comprising:
determining, based at least in part on historical task data for the network computing device, whether the one or more tasks comport with tasks previously performed by the network computing device; if determined that the one or more tasks fail to comport with the tasks previously performed by the network computing device, remove a number of tasks from the one or more tasks; and if determined that the one or more tasks comport with the tasks previously performed by the network computing device, enable prioritization of the one or more tasks based at least in part on the obtained health data.

38 . The system of claim 36 , wherein the one or more services are further configured to calculate a device score for the network computing device based at least in part on the obtained health data from the other network devices, the device score indicating whether the network computing device is capable of performing any of the one or more tasks.

39 . The system of claim 36 , wherein the one or more services are further configured to:
determine whether the one or more tasks transmitted to the network computing device have been performed successfully by the network computing device; if determined that a task of the one or more tasks was not completed successfully:
obtain new health data associated with the network computing device; and
based at least in part on the obtained new health data, reprioritize the one or more tasks such that the task is performed after other tasks are successfully completed.

40 . The system of claim 36 , wherein the health data includes network capacity available for the other network devices in the data center.

Assignees

• Amazon Tech Inc

Inventors

• Louca Andreas
• Peretin Goran
• Ferreira João André Henriques
• Kelly Mark Noel

Classifications

• H04L43/0823 Primary

  Errors, e.g. transmission errors · CPC title

• H04L41/142

  using statistical or mathematical methods · CPC title

• H04L43/04

  Processing captured monitoring data, e.g. for logfile generation · CPC title

• H04L41/16

  using machine learning or artificial intelligence · CPC title

• H04L43/0817

  by checking functioning · CPC title