Monitored system event processing and impact correlation

Patent metadata

Field	Value
Publication number	US-9755938-B1
Application number	US-201213721905-A
Country	US
Kind code	B1
Filing date	Dec 20, 2012
Priority date	Dec 20, 2012
Publication date	Sep 5, 2017
Grant date	Sep 5, 2017

Abstract

The subject disclosure is directed towards providing a user with impact-related information regarding the impact of a monitored event (for a detected resource issue) to a managed system, such as a storage system. An event is generated when a resource such as a hard disk has an issue, e.g., has failed. Information from the event is automatically extracted and used to communicate with a management program coupled to the resource. Communication with the management program obtains information as to the impact the resource issue has to the system, e.g., what servers and/or applications are impacted. The impact-related data may be presented in a report to a user.

First claim

What is claimed is:

1. A method comprising:
receiving an event notification in response to an event associated with a monitored system resource, the received event notification comprising event-related data;
processing the event-related data, by a notification processing program associated with a user device, to obtain a key to additional information associated with the monitored system resource, the key comprising a unique identifier associated with the monitored system resource;
accessing a database associated with the monitored system resource using the key to obtain the additional information;
using at least part of the additional information for establishing communication with a management program coupled to the monitored system resource via a network connection, wherein the user device is connected remotely to the management program via the network connection;
querying the management program, by the user device, using a generated set of automated queries to obtain query results from the management program, the obtained query results comprising management data related to the monitored system resource, the management data identifying one or more entities that use the monitored system resource;
generating, by the notification processing program, an interactive impact report from the obtained query results, the interactive impact report including impact-related data associated with the event, the interactive impact report including data identifying the monitored system resource, data identifying the one or more entities using the monitored system resource, and information regarding a potential impact of the event on the one or more entities; and
outputting the interactive impact report to a user interface of the user device to automatically inform the user of the potential impact of the event to the monitored system, the interactive impact report comprising one or more interactive elements.

2. The method of claim 1 , wherein processing the event-related data comprises extracting the key from the event notification message, and further comprising:
automatically extracting a server name from the interactive impact report; and
obtaining further information regarding the server, by an automated process, the further information identifying a current status of the server and applications running on the server.

3. The method of claim 1 , wherein the unique identifier associated with the key comprises a serial number of the monitored system resource, and further comprising:
accessing a database record associated with the database; and
updating one or more fields in the database record in response to a change associated with the monitored system resource.

4. The method of claim 3 , wherein the database record includes an IP address and a port associated with the management program, and using at least part of the additional information for establishing communication comprises communicating with the management program via the IP address and the port.

5. The method of claim 1 , further comprising:
presenting the interactive impact report within the user interface, wherein the interactive impact report comprises an events area and an impact area, wherein received events are displayed within the events area, wherein a user interacts with the events area to select an event; and
populating the impact area with data related to a selected event from the received events.

6. The method of claim 3 , wherein the database record includes security-related information, and wherein using at least part of the additional information for establishing communication comprises providing a credential based upon the security-related information to the management program.

7. The method of claim 1 , wherein the monitored system resource is a resource on a network storage system, the network storage system comprising a plurality of networked resources, wherein an event is triggered based on a capacity threshold for the monitored system resource indicating disk space is running low, the capacity threshold comprising a disk space threshold, a logical unit (LUN) space threshold, or a pool disk space threshold.

8. The method of claim 1 , wherein the user interface is a graphical user interface, and wherein outputting the interactive impact report comprises presenting at least part of the impact-related data on the graphical user interface, wherein the graphical user interface is configured to receive input from a user associated with the user device, generate a query based on the received input, and transmit the generated query to the monitored system resource, wherein the received input comprises a selection of an interactive element within the one or more interactive elements associated with the interactive impact report.

9. In a computing environment, a system comprising:
one or more processors; and
a report generation program implemented on the one or more processors, the report generation program configured to generate an interactive impact report from query results associated with a set of automated queries, the interactive impact report comprising one or more interactive elements, the interactive impact report further comprising impact-related data corresponding to an event associated with a storage system resource generated by an event monitor that monitors the storage system resource of the managed system, the report generation program configured to receive an event notification associated with an event indicating the storage system resource has a detected issue, extract a key from the received event notification, accessing a database to associated with the storage system resource using the key to obtain data to establish communication with a management program coupled to the storage system resource, generate the set of automated queries, and query the management program using the generated set of automated queries to obtain query results comprising management data related to the storage system resource, the management data identifying one or more entities using the storage system resource and information regarding a potential impact of the event on the one or more entities, generate the interactive impact report using the obtained query results, and output the interactive impact report to a graphical user interface, the interactive impact report comprising the impact-related data and the one or more interactive elements.

10. The system of claim 9 , wherein the report generation program is run on an external computing device, and wherein one or more fields in the database is automatically updated in response to a change in the storage system resource.

11. The system of claim 9 , wherein the event monitor outputs the event in association with the unique identifier used by the report generation program as the key to find a record in the database, wherein the one or more interactive elements include a displayed server element, and wherein selecting the displayed server element within the interactive impact report sends a query to the server to determine a current status of the server.

12. The system of claim 9 , wherein the data to establish communication with the management program comprises IP address data and port data.

13. The system of claim 9 , wherein the data to establish communication with the management program comprises a username, password and scope data for authentication.

14. The system of claim 9 , wherein the storage system resource comprises a hard disk drive, and wherein the event generated by the event monitor indicates a hard disk drive malfunction, and wherein the management data indicates whether the hard disk drive is part of a logical unit.

Assignees

• Emc Corp
• Emc Ip Holding Co Llc

Inventors

• Laporte Russell
• Collins Daniel
• Pawar Ankita
• Liang Jun

Classifications

• H04L41/22

  comprising specially adapted graphical user interfaces [GUI] · CPC title

• H04L43/10 Primary

  Active monitoring, e.g. heartbeat, ping or trace-route · CPC title

• H04L43/16

  Threshold monitoring · CPC title

• H04L41/0681 Primary

  Configuration of triggering conditions · CPC title

• H04L41/069

  using logs of notifications; Post-processing of notifications · CPC title