Network management system with a switchable flood revention mode pregarding fault events for a managed device

Patent metadata

Field	Value
Publication number	US-9253023-B2
Application number	US-201214237332-A
Country	US
Kind code	B2
Filing date	Aug 1, 2012
Priority date	Aug 10, 2011
Publication date	Feb 2, 2016
Grant date	Feb 2, 2016

Abstract

A network management system comprises a server connected to a plurality of probes, each probe connected to one or more managed devices. A method of operating the system comprises the steps of receiving fault events for the managed devices at the probes, detecting that the rate of received fault events has reached or is approaching an overload level for the server, identifying a managed device contributing to the reached or approached overload level, switching the probe for the identified managed device to a flood prevention mode, and operating the switched probe in the flood prevention mode thereby combining multiple fault events for the identified managed device into a single fault event for transmission to the server.

First claim

The invention claimed is:

1. A method of operating a network management system, the network management system comprising a server connected to a plurality of probes, with each probe of the plurality of probes connected to one or more managed devices, the method comprising the steps of:
receiving fault events for the managed devices at the plurality of probes;
detecting that the rate of received fault events has reached or is approaching an overload level for the server;
identifying a managed device contributing to the reached or approached overload level;
switching the probe for the identified managed device to a flood prevention mode; and
operating the switched probe in the flood prevention mode by combining multiple fault events for the identified managed device into a single fault event for transmission to the server.

2. A method according to claim 1 , wherein the step of identifying a managed device contributing to the reached or approached overload level is carried out by each individual probe.

3. A method according to claim 1 , wherein the step of identifying a managed device contributing to the reached or approached overload level is carried out by the server and the step of switching the probe for the identified managed device to a flood prevention mode comprises instructing the probe to switch to the flood prevention mode.

4. A method according to claim 3 , wherein the step of identifying a managed device contributing to the reached or approached overload level comprises creating a list of fault event rates per managed device and selecting the managed device with the greatest fault event rate.

5. A method according to claim 3 further comprising:
after detecting that the rate of received fault events has reached or is approaching an overload level for the server, identifying one or more further managed devices contributing to the reached or approached overload level and switching the probe for the further identified managed devices to a flood prevention mode.

6. A network management system comprising a server connected to a plurality of probes, each probe of the plurality of probes connected to one or more managed devices, the network management system configured to receive fault events for the managed devices at the plurality of probes; detect that the rate of received fault events has reached or is approaching an overload level for the server; identify a managed device contributing to the reached or approached overload level; switch the probe for the identified managed device to a flood prevention mode; and operate the switched probe in the flood prevention mode thereby combining multiple fault events for the identified managed device into a single fault event for transmission to the server.

7. A system according to claim 6 , wherein each individual probe is configured to identify a managed device contributing to the reached or approached overload level.

8. A system according to claim 6 , wherein the server is configured to identify a managed device contributing to the reached or approached overload level and switch the probe for the identified managed device to a flood prevention mode by instructing the probe to switch to the flood prevention mode.

9. A system according to claim 8 , wherein the server is configure to, when identifying a managed device contributing to the reached or approached overload level, create a list of fault event rates per managed device and select the managed device with the greatest fault event rate.

10. A system according to claim 8 , wherein the server is further configured to, responsive to detecting that the rate of received fault events has reached or is approaching an overload level for the server, identify one or more further managed devices contributing to the reached or approached overload level and switch the probe for the further identified managed devices to a flood prevention mode.

11. A computer program product for operating a network management system, the computer program product comprising:
a non-transitory computer readable storage medium readable by a processing circuit and having stored thereon instructions for execution by the processing circuit for performing the method of claim 1 .

12. A computer program stored on a non-transitory computer readable storage medium and loadable into the internal memory of a digital computer, comprising software code portions, when said computer program is run on a computer, for performing the method of claim 1 .

Assignees

• Cook Stephen F
• Franklin David R
• IBM

Inventors

• Cook Stephen F
• Franklin David R

Classifications

• H04L41/069

  using logs of notifications; Post-processing of notifications · CPC title

• H04L41/0695

  the faulty arrangement being the maintenance, administration or management system · CPC title

• H04L41/0627 Primary

  by acting on the notification or alarm source · CPC title

• H04L41/044 Primary

  comprising hierarchical management structures · CPC title

• H04L41/06 Primary

  Management of faults, events, alarms or notifications · CPC title