Automated electronic computing and communication system event analysis and management

Patent metadata

Field	Value
Publication number	US-9742625-B2
Application number	US-201514824143-A
Country	US
Kind code	B2
Filing date	Aug 12, 2015
Priority date	Aug 12, 2015
Publication date	Aug 22, 2017
Grant date	Aug 22, 2017

Abstract

Systems, apparatuses, and methods for automatic automated electronic computing and communication system event analysis and management are disclosed. Automatic automated electronic computing and communication system event analysis and management may include identifying an event, generating a computer readable representation of the electronic computing and communication system using automated topology enumeration, identifying an element of the electronic computing and communication system based on the representation, identifying a metric for the element, automatically investigating to determine a value for the metric, generating a remediation priority for the element based on a metric weight associated with the metric and a network layer value associated with a network layer associated with a network layer role associated with the element, and generating a graphical representation of the electronic computing and communication system indicating the remediation priority.

First claim

What is claimed is:

1. A method of automatically analyzing an electronic computing and communication system event, the method comprising:
identifying information indicating an event in an electronic computing and communication system;
generating a computer readable representation of the electronic computing and communication system using automated topology enumeration, wherein the representation represents a plurality of elements of the electronic computing and communication system organized in a hierarchical plurality of network layers;
identifying an element of the electronic computing and communication system from the plurality of elements based on the computer readable representation of the electronic computing and communication system;
identifying a metric for the element of the electronic computing and communication system;
automatically investigating the electronic computing and communication system to determine a value for the metric for the element of the electronic computing and communication system;
on a condition that the value is an abnormal value, generating a remediation priority for the element of the electronic computing and communication system based on a metric weight associated with the metric and a network layer value associated with a network layer from the hierarchical plurality of network layers, wherein the element is associated with a network layer role corresponding to the network layer;
generating a graphical representation of the electronic computing and communication system, the graphical representation indicating the remediation priority; and
outputting or storing the graphical representation.

2. The method of claim 1 , wherein automated topology enumeration includes:
automatically discovering the plurality of elements;
generating a computer readable representation of physical connectivity for the plurality of elements; and
generating a computer readable representation of logical connectivity for the plurality of elements.

3. The method of claim 2 , wherein automatically discovering the plurality of elements includes automatically discovering an internet service provider.

4. The method of claim 1 , wherein automated topology enumeration includes:
identifying the network layer role associated with the element; and
identifying the network layer associated with the element based on the network layer role.

5. The method of claim 4 , wherein identifying the network layer role includes:
identifying information representing the element; and
determining the network layer role by evaluating a configuration management database based on the information representing the element.

6. The method of claim 1 , wherein automated topology enumeration includes:
identifying simple network management protocol discovery information indicating the element.

7. The method of claim 6 , wherein identifying the simple network management protocol discovery information indicating the element includes identifying information indicating a component of the element.

8. The method of claim 1 , wherein automated topology enumeration includes:
identifying network protocol information for the element, wherein the network protocol information for the element indicates a physical connection between the element and a second element of the electronic computing and communication system.

9. The method of claim 8 , wherein identifying the network protocol information for the element includes identifying network protocol information that indicates that the physical connection physical connection between the element and the second element includes a physical connection between a component of the element and a component of the second element.

10. The method of claim 1 , wherein identifying the metric includes:
identifying a plurality of metric categories;
identifying a metric category for the metric from the plurality of metric categories; and
identifying the metric weight associated with the metric based on the metric category.

11. The method of claim 10 , wherein the plurality of metric categories includes:
a change category including a plurality of change metrics, wherein each change metric from the plurality of change metrics represents a respective managed change information element representing a managed change to the electronic computing and communication system;
an availability category including a plurality of availability metrics, wherein each availability metric from the plurality of availability metrics represents a respective availability of an element of the electronic computing and communication system;
a performance category including a plurality of performance metrics, wherein each performance metric from the plurality of performance metrics represents a respective performance of an element of the electronic computing and communication system;
a capacity category including a plurality of capacity metrics, wherein each capacity metric from the plurality of capacity metrics represents a respective available capacity of an element of the electronic computing and communication system; or
a variance category including a plurality of variance metrics, wherein each variance metric from the plurality of variance metrics represents a respective variance of another metric from a corresponding defined metric value for an element of the electronic computing and communication system.

12. The method of claim 1 , further comprising:
automatically remediating the electronic computing and communication system.

13. The method of claim 12 , wherein automatically remediating the electronic computing and communication system includes:
identifying a remediation procedure associated with the element and the event; and
performing the remediation procedure.

14. The method of claim 1 , wherein generating the graphical representation includes generating the graphical representation such that the graphical representation includes:
a graphical representation of the hierarchical plurality of network layers, including a graphical representation of the network layer;
a graphical representation of the element spatially corresponding to the graphical representation of the network layer;
on a condition that the value is an abnormal value, a graphical representation indicating that the value is an abnormal value and indicating a category associated with the metric.

15. A method of automatically analyzing an electronic computing and communication system event, the method comprising:
identifying information indicating an event in an electronic computing and communication system;
generating a computer readable representation of the electronic computing and communication system using automated topology enumeration, wherein the computer readable representation represents a plurality of elements of the electronic computing and communication system organized in a hierarchical plurality of network layers, wherein each respective element from the plurality of elements is associated with a respective network layer role corresponding to a respective network layer;
identifying a set of elements of the electronic computing and communication system from plurality of elements based on the computer readable representation of the electronic computing and communication system;
identifying a plurality of metrics, wherein each element from the set of elements is associated with at least one respective metric from the plurality of metrics;
automatically investigating the electronic computing and communication system to determine a plurality of values, wherein each value from the plurality of values corresponds with a respec

Assignees

• Servicenow Inc

Inventors

• Delinocci John

Classifications

• G06F21/52

  during program execution, e.g. stack integrity {; Preventing unwanted data erasure; Buffer overflow} · CPC title

• H04L41/22

  comprising specially adapted graphical user interfaces [GUI] · CPC title

• H04L41/0654

  using network fault recovery (ring fault isolation or reconfiguration in loop networks without recovery actions by a network management system H04L12/437) · CPC title

• H04L41/065 Primary

  involving logical or physical relationship, e.g. grouping and hierarchies · CPC title

• G06F21/577

  Assessing vulnerabilities and evaluating computer system security · CPC title