Intelligent monitoring and logging platform

Patent metadata

Field	Value
Publication number	US-2022345472-A1
Application number	US-202117238774-A
Country	US
Kind code	A1
Filing date	Apr 23, 2021
Priority date	Apr 23, 2021
Publication date	Oct 27, 2022
Grant date	—

Abstract

An enterprise-wise means for determining monitoring requirements for technology resources, such as, software, hardware, firmware, network or the like and implementing the monitoring. Artificial Intelligence (AI) is implemented to determine monitoring requirements based on characteristics of the technology resource that is to be monitored. In this regard, the characteristics of the technology resource serve to define the problem(s), such as cyber threats and/or performance issues that the technology resource currently faces or will face in the future. By determining the monitoring requirements based on the technology resource's characteristics, including the technological environment, the invention serves to describe what needs to be monitored in terms of the problems that the technology resource currently faces or will face.

First claim

What is claimed is:

1 . A system for determining monitoring requirements and implementing monitoring for enterprise-wise technology resources, the system comprising:
a plurality of monitoring tools, each of the monitoring tools configured to monitor for and log one or more specific events or actions performed by or associated with one or more technology resources; and a computing platform including a memory and at least one processor in communication with the memory, wherein the memory stores instructions that are executable by the at least one processor and configured to:
receive, for each of the enterprise technology resources, characteristics, wherein the characteristics include at least (i) a type of technology resource, (ii) one or more technological environments in which the technology resource is deployed, and (iii) one or more purposes for the technology resource,
determine, for each of the enterprise technology resources, monitoring requirements based on the characteristics,
determine, for each of the enterprise technology resources, a set of monitoring tools from amongst the monitoring tools that satisfies the monitoring requirements,
integrate, for each of the enterprise technology resources, the set of monitoring tools;
deploy and execute, on each of the enterprise technology resources, the integrated set of monitoring tools, and
log specific events or actions monitored by the set of monitoring tools.

2 . The system of claim 1 , wherein the plurality of monitoring tools comprises cyber threat monitoring tools and wherein the instructions configured to determine monitoring requirements are further configured to determine cyber threat monitoring requirements.

3 . The system of claim 2 , wherein the plurality of monitoring tools further comprises performance monitoring tools and wherein the instructions configured to determine monitoring requirements are further configured to determine performance monitoring requirements.

4 . The system of claim 1 , wherein the instructions configured to determine the monitoring requirements are further configured to determine the monitoring requirements by applying monitoring rules selected based on the characteristics.

5 . The system of claim 1 , wherein the instructions configured to determine the set of monitoring tools are further configured to optimize the set of monitoring tools, wherein optimizing comprises reducing or eliminating redundant monitoring on the technology resource.

6 . The system of claim 1 , wherein the instructions are further configured to identify, for each of the technology resources, the monitoring requirements that cannot be satisfied by the plurality of monitoring tools.

7 . The system of claim 1 , wherein the instructions are further configured to validate, for each of the technology resources, at least one selected from a group comprising of (i) an accuracy of the monitoring requirements, and (ii) that the deployed monitoring tools satisfy the monitoring requirements.

8 . The system of claim 1 , wherein the system for determining monitoring requirements and implementing monitoring for enterprise-wise technology resources is included in enterprise-wide technology resource management system.

9 . The system of claim 8 , wherein the enterprise-wide technology resource management system includes an inventory management sub-system configured to track deployment of technology resources enterprise-wide.

10 . The system of claim 8 , wherein the enterprise-wide technology resource management system includes a monitoring results analytics sub-system configured to analytically analyze the logged specific events and actions monitored by the monitoring tools to (i) identify current problems related to the technology resource, and (ii) predict future issues based on identified trends in the events and actions.

11 . A computer-implemented method for determining monitoring requirements and implementing monitoring for enterprise-wise technology resources, the method is executable by one or more computing processing devices and comprises:
receiving, for each of a plurality of enterprise technology resources, characteristics, wherein the characteristics include at least (i) a type of technology resource, (ii) one or more technological environments in which the technology resource is deployed, and (iii) one or more purposes for the technology resource; determining, for each of the enterprise technology resources, monitoring requirements by based on the characteristics; determining, for each of the enterprise technology resources, a set of monitoring tools from amongst a plurality of monitoring tools, wherein the set of monitoring tools satisfies the monitoring requirements; deploying and executing, on each of the enterprise technology resources, the set of monitoring tools; and logging specific events or actions monitored by the set of monitoring tools.

12 . The computer-implemented method of claim 11 , wherein determining the set of monitoring tools from amongst the plurality of monitoring tools further defines the monitoring tools as one or more of (i) cyber threat monitoring tools and (ii) performance monitoring tools and wherein determining monitoring requirements further comprises determining one or more of (i) cyber threat monitoring requirements, an (ii) performance monitoring requirements.

13 . The computer-implemented method of claim 11 , wherein determining the monitoring requirements further comprises determining the monitoring requirements by applying monitoring rules selected based on the characteristics

14 . The computer-implemented method of claim 11 , wherein determining the set of monitoring tools further comprises optimizing the set of monitoring tools, wherein optimizing comprises reducing or eliminating redundant monitoring on the technology resource.

15 . The computer-implemented method of claim 11 , further comprising:
identifying, for each of the technology resources, the monitoring requirements that cannot be satisfied by the plurality of monitoring tools.

16 . The computer-implemented method of claim 11 , further comprising:
validating, for each of the technology resources, at least one selected from a group comprising of (i) an accuracy of the monitoring requirements, and (ii) that the deployed monitoring tools satisfy the monitoring requirements.

17 . A computer program product comprising:
a non-transitory computer-readable medium comprising:
a first set of codes for causing a computer to receive, for each of a plurality of enterprise technology resources, characteristics, wherein the characteristics include at least (i) a type of technology resource, (ii) one or more technological environments in which the technology resource is deployed, and (iii) one or more purposes for the technology resource;
a second set of codes for causing a computer to determine, for each of the enterprise technology resources, monitoring requirements base on the characteristics;
a third set of codes for causing a computer to determine, for each of the enterprise technology resources, a set of monitoring tools from amongst a plurality of monitoring tools, wherein the set of monitoring tools satisfies the monitoring requirements;
a fourth set of codes for causing a computer to deploy and execute, on each of the enterprise technology resources, the integrated set of monitoring tools; and
a fifth set of coded for causing a computer to log specific events or actions monitored by the set of monitoring tools.

18 . The computer program product of claim 1

Assignees

• Bank Of America

Inventors

• Kling John Howard
• Dudley Charles Edward

Classifications

• G06N20/00

  Machine learning · CPC title

• H04L63/1425 Primary

  Traffic logging, e.g. anomaly detection · CPC title

• H04L63/1408

  by monitoring network traffic (monitoring network traffic per se H04L43/00) · CPC title