US 10,120,928 B2 · Method and system for clustering event messages and managing event-message clusters

Abstract

The current document is directed to methods and systems for processing, classifying, and efficiently storing large volumes of event messages generated in modern computing systems. In a disclosed implementation, received event messages are assigned to event-message clusters based on non-parameter tokens identified within the event messages. A parsing function is generated for each cluster that is used to extract data from incoming event messages and to prepare event records from event messages that more efficiently and accessible store event information. The parsing functions also provide an alternative basis for assignment of event massages to clusters.

Claims25

Dependent claims

An event-message clustering system comprising:

one or more processors;
one or more memories;
and
computer instructions, stored in one or more of the one or more memories that, when executed by one or more of the one or more processors, control the event-message clustering system to
receive event messages, and
process each of the received event messages by
determining a cluster to which to assign the event message,
employing a parsing function associated with the determined cluster to extract data values from the event message,
generating an event record corresponding to the event message that includes the extracted data values, and
storing the event record within, or associated with, the selected cluster in a physical data-storage device.

7 more elements

A method that processes event messages, carried out within an event-message clustering system, the event-message clustering system having one or more processors, one or more memories, and computer instructions, stored in one or more of the one or more memories that, when executed by one or more of the one or more processors, control the event-message clustering system to receive event messages and process each of the received event messages, the method comprising:

receiving event messages, and
processing each of the received event messages by
determining a cluster to which to assign the event message,
employing a parsing function associated with the determined cluster to extract data values from the event message,
generating an event record corresponding to the event message that includes the extracted data values, and
storing the event record within, or associated with, the selected cluster in a physical data-storage device.

3 more elements

Dependencies are inferred from the claim text.

Facts

Application

14/318,968Filed 30 Jun 2014 · continuation in part

Priority

24 Jun 2014

Published

US 2015/0370885 A124 Dec 2015

Granted

6 Nov 2018

Term ends

Not estimatedThe source records don’t support an estimate.

Classification5 codes

H04L 41/0604
Management of faults, events, alarms or notifications: using filtering, e.g. reduction of information by using priority, element types, position…
G06F 16/353
Clustering; Classification: into predefined classes
H04L 41/40
Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks: using virtualisation of…
H04L
Digital communication

Family

Application14/313,802Parent of this continuation-in-part · filed 24 Jun 2014

US 2015/0370885 A1Pre-grant publication · published 24 Dec 2015

US 10,205,627 B2Related patent

US 2015/0372855 A1Published application

US 10,120,928 B2This patent

From the US filing history. Foreign family members aren’t listed.

Method and system for clustering event messages and managing event-message clusters

Life of this patent

Method and system for clustering event messages and managing event-message clusters

Life of this patent

Abstract

Claims25