# US 10,122,603 B2 · Inter-nodes multicasting communication in a monitoring infrastructure

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,122,603 B2
- Document ID: US10122603B2
- Status: Granted
- Kind: B2
- Application number: 15/453,929
- Filed: 2017-03-09
- Published: 2017-06-22
- Granted: 2018-11-06
- Earliest claimed: 2015-09-29
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: Michal Bodziony; Lukasz Gaza; Artur M. Gruszecki; Tomasz Kazalski; Konrad K. Skibski
- Web page: https://patentgrep.com/patent/US10122603B2

## CPC

- H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46)
- H04L 12/185: {with management of multicast group membership}
- H04L 12/1895: {for short real-time information, e.g. alarms, notifications, alerts, updates}
- H04L 41/046: comprising network management agents or mobile agents therefor
- H04L 41/0622: {based on time}
- H04L 41/0681: Configuration of triggering conditions
- H04L 43/08: Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L 43/12: Network monitoring probes
- H04L 51/52: for supporting social networking services
- H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP]
- H04L 67/04: specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
- H04L 67/535: {Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A method for determining when to send monitoring data to a server within a monitoring infrastructure. The method includes a first agent computer collecting a first instance of monitoring data relating to an alert on a computer system, wherein the collecting is based, at least in part, on a set of instructions received from a monitoring server, wherein the set of instructions includes instructions for determining whether the monitoring data is relevant to triggering the alert. The first agent then receives at least one second instance of monitoring data from a set of second agents. The first agent then determines whether the first instance of monitoring data is relevant to triggering the alert based, at least in part, on the first instance of monitoring data and the second instance of monitoring data. The first agent then determines whether to send the first instance of monitoring data to the monitoring server.

## Claims

### Claim 1

A method comprising:
collecting, by one or more processors on a first agent, a first instance of monitoring data relating to an activated alert on a computer system, wherein the collecting is based, at least in part, on a set of instructions received from a monitoring server, wherein the set of instructions identifies the first agent and a second agent of a plurality of agents in a multicast group, and wherein the second agent monitors for a second instance of monitoring data;
obtaining, by one or more processors on the first agent, a value for a first metric that is included in the collected first instance of monitoring data;
calculating, by one or more processors on the first agent, a delay period to wait before sending the first instance of monitoring data to the monitoring server and to the plurality of agents in the multicast group, wherein the delay period is based on how likely an alert condition is to be met based on the value of the first metric;
receiving, by the one or more processors on the first agent, the second instance of monitoring data from the second agent;
obtaining, by one or more processors on the first agent, a value for a second metric that is included in the received second instance of monitoring data;
determining, by the one or more processors on the first agent, whether the collected first instance and the received second instance of monitoring data are relevant to triggering the activated alert based, at least in part, on whether the value for the first metric and the value for the second metric, are above respective alert thresholds;
responsive to determining that the collected first instance and the received second instance of monitoring data are not relevant to triggering the activated alert, determining, by the one or more processors on the first agent, not to send the first instance and second instance of monitoring data to the monitoring server; and
responsive to determining not to send the first instance and the second instance of monitoring data to the monitoring server, recalculating, by one or more processors on the first agent, the delay period, wherein the recalculated delay period is based on how likely an alert condition is to be met based on the values of the first metric and the second metric.

### Claim 2 (depends on 1)

The method of claim 1, wherein the set of instructions received from the monitoring server further comprises:
one or more instructions defining one or more specific conditions to be monitored on one or more of the agents, wherein the one or more instructions define a range or limit for the one or more specific conditions; and
definitions of one or more multicast groups for the one or more specific conditions.

### Claim 3 (depends on 1)

The method of claim 1, wherein calculating a delay period comprises:
calculating, by one or more processors, a first integral based on the value of the first metric included in the collected first instance of monitoring data; and
calculating the delay period by multiplying the first integral by a constant parameter, wherein the constant parameter is based on a frequency by which the first agent obtains monitoring data.

### Claim 4

The method of dam 1, wherein recalculating the delay period comprises;
calculating, by one or more processors, a second integral based on the value of the first metric included in the collected first instance of monitoring data and the value of the second metric included in the received second instance of monitoring data; and
recalculating the delay period by multiplying the second integral by a constant parameter, wherein the constant parameter is based on a frequency by which the first agent and the second agent obtain monitoring data.
